Mac Tips and "How To" On a Mac

Best WIFI cards / Best USB adapter KisMAC Compatible

2011-06-14T23:30:00.000-04:00

Best WIFI cards /Wlan KisMAC Compatible

Also know as: KisMAC Network Adapters, USB Injector, USB NIC (Network Interface Card) or Kismac USB Re-Injection Adapters

Side note: We need 25 people to "like" our new Facebook page to have a real "name" :-)
Just a little click?

Thanks !

Not all USB Network Adapters are created equal. If you have read some of the comments left, you have realized that buying the right "USB Thingy" will make your life a breeze Vs. a freakin' nightmare.

Some Networks Adapters will work, some may work in the future, and some will never work.
For the "Never" and "In a Distant Future" I will not spend too much time: For the sake of you, don't try to finagle or to save $5, you'll end up in a nightmare: Been there, Done that.

For the Adapters that work right away, we have 3 types: The Bad, the Ok , and The Excellent.
If you believe that an higher price will determine The Excellent, you're in for a big surprise!
So, enough suspense, here it is:

Best WiFi Card compatible with KisMAC

Alfa AWUS036H + 5dBi + Mount + FREE SHIPPING Compatible Mac / Windows / Linux / Ubuntu Card + USB + Antenna 5dBi + CD + Mount

Alfa AWUS036H V5 1000mW Compatible Mac / Windows / Linux / Ubuntu
Card + USB + Antenna 5dBi + CD is about $29

The Best Deal is: Same as above + 9 dBi Antenna (One 5dBi + One 9dBi) + Suction Mount Cup Alfa AWUS036H V5 1000mW + 5 dBi + 9 dBi + Suction Cup Mount + USB + CD
Price about $35 for the bundle. Mount alone is ~$4, 9dBI antenna alone ~$9

This Ref only. The Alfa AWUS036NH (2000mW) is not KisMAC compatible. All Drivers for the AWUS036H , KisMAC compatible are located here. Windows, Mac, Linux included.

Here is an example on how good is that card:
( Click on Read More )

Hawking HWUG1 Vs. Alfa AWUS036H

3,546 ft with the Alpha and a simple 5dBi Antenna
Click to enlarge pictures.
Hawking: 6 Networks, Alfa: 54 Networks

GPS Verified.
Google Earth KML file
Click to Download, open with Google Earth

Make your choice: Best deals on this side of the universe

Benchmarks

Let's start with your Airport Extreme Card as a Benchmark.

All benchmarks were done from the EXACT same spot, with KisMAC running for 2 minutes.
To test the antennas, I have interchanged them (I have few of them, from 2dB dipole to 12dB Yagi)

Airport Extreme
Unless you have the curiosity, you may not have noticed that the more expensive MacBook Pro have a lesser sensitivity that the cheaper MacBook. The reason? Plastic Vs. Aluminum: The body of the MacBook Pro, being in aluminum absorb some of the RF, hence a lesser sensitivity. You would expect a better sensitivity for the price paid, but no!
Verdict:
Grade 3/10    Airport Extreme on a MBP Alu Unibody: (Card Broadcom BCM43xx)
Grade 5/10    Airport Extreme on a MacBook

USB Stick Hawking HWUG1

The HWUG1 has few advantages: Fairly small* and it comes with a RP-SMA connector for the antenna. The Antenna that is sold with it is a dipole 2.2 dB gain. Don't expect much from the antenna.
I am going to give you straight out from the website, a pure copy of their own words" ....Removable antenna with reverse SMA connector - upgradeable to a higher power antenna for a wider wireless coverage. (For the best result, pair the HWUG1 with a Hawking Hi-Gain Antenna )"
In short, they tell you right away and in so many words: buy a high gain antenna. From us, Please.Well, at about $40, one would expect not to have to shell out another $40 (Ebay, from $25+SH to $135) for a better antenna to get some signals.

I am not impressed by it's sensitivity, nor by it's price. (in relation to the quality)

Verdict : Just OK. Grade 5/10

Hawking HWUG1 Specs:
Receive Sensitivity -70dBm@54Mbps, -83dBm@11Mbps
Transmit power 17dBm ± 2dBm (about 50mW)
hawking hwug1 Chipset: RT73 FCC ID#: NDD957318S607

USB Stick Hawking HWUG1A

Ah! This one is "Mac Compatible", White, and $10 more than the grey one. A quick look will reveal to us that the FCC ID# is identical to the HWUG1: hence same Chipset. Roughly, it's white and $10 more.
As for the sensitivity, well, as it is the same Chipset (RT73).... I can't see any difference. (but I am just a user, not a lab tech.)

Grade 4/10 but hey! it's white!!!! And between $50 to $60

Hawking HWUG1A Specs:
Receive Sensitivity -70dBm@54Mbps, -83dBm@11Mbps
Transmit power 17dBm ± 2dBm (about 50mW)

Hawking hwug1 Chipset: RT73 FCC ID#: NDD957318S607

Edimax EW-7318USg

Okey... look like an Hawking. Or the Hawking look like an Edimax.
Chipset? identical (RT73)
FCC ID? Identical: NDD957318S607.
So, when it looks like a duck, walks like a duck, and quack like a duck, it's probably a duck.
The result are almost-almost the same, the antenna delivered is a "high gain" 4dB, but my test are giving me the exact same result as with a 2.2dB, and a 5dB. So, I frown and wonder.....
Price is the same, or more .... from $35 to $73 (!!!!)
Verdict: Just Ok at $35, very bad at $73.

Grade 5/10 at $35 , 2/10 at $73

* All USB sticks have a little issue: they are a bit "fat!". Once you plug them, the width of the stick does not allow you to use the next USB port. For that, you'll need a USB extension.
* in any case, you better use a USB extension than a Coaxial Cable Extension: The longer the Coax cable, the more loss of signal.

Who's Your Daddy?

Not the good, but the Excellent!

Warning: Copies and knock-off of this Card are rampant on the internet. They look the same, but you're in for a big disappointment and a lot of swearing if you don't make sure.

First, your average USB stick has a transmit power of 40 to 70mW, this one has 16 times more, and 25 times more than a D-link 122 ( Built-in antenna are baaaaaaad)
The Chipset (engine) works right off KisMAC. Plug and Play ....
Compatible Mac, Windows and Linux (and it's not just white!) , RP-SMA Jack for Add-On antennas, USB Extension is provided.

Sensitivity:

The sensitivity is remarkable, at first try I got 42 AP's compared to the 2 that I had with my Airport and the 9 with the Hawking, respectively 2,100% and 466% increase.

Second try:

I was so surprised that I had to double check:
Some SSID were named after the owner, i.e "Jane Doe's Network". As I live in the 'burbs, it's not really hard to figure out where the owner is compared to me: "Jane Doe" on the White Pages + Google Earth and the Ruler tool gives you the distance.
So, "Jane Doe's Network" was ....1750 Feet away! 536 Meters
Okeyy... Where I am , it's the suburbs. Fairly flat but not "clear of obstacle" houses, trees, etc.

My first thought was: something is wrong. 1750 Feet with no directional antenna was too much. The signal was faint, but it was there...
I took note of the BSSID i.e 00:24:A0:F8.... and take the car for a little wardriving... go to the address and ...
Bang! Confirmed ! It was not an error. 1750 Feet
On the way back, I locked on MY SSID, and drove around. I went to a mount with a fairly clear line to my AP, and started scanning... Connection established... downloading emails 1900 feet away from my AP.
My Router is a Dual-Band, but still... it's behind a brick wall, above the natural ground level by 3 feet. Don't get me wrong, I was not connected at 54MBPS, but I had a connection 1900 feet away.

Third try:
As shown in the picture above: 3,546 ft (1km) on a non direct line of sight: Router inside a house, behind trees.   So, don't look any further, This is the card you want! Forget about the Hawking, Edimax & D-Link. Get that one!
And you know what? : It's cheaper than the Hawking!!!

So, here is the link, and yes, it's a referral link. So, why use this link?
A) You have the absolute warranty to receive a genuine product, and not a non-working knock-off. It's a plug-scan-smile product. (Only 3 Authorized dealers in the US)

B) The Other business that sale this card has NOT a good reputation as per warranties and returns. Check the KisMAC-ng team review. Consider yourself as warned.

C) The Other business is more expensive: the same deal will run at $48 for the exact same bundle
C1) One Biz is selling Kock-Off from China and ships To CA. Here again you have been warned, example at the end

Links to the Card, Reviews and Tips

Do NOT buy any other card. This reference only. Other Chipset are not / may not be compatible.

Before buying, read the paragraph below to determine your needs and Check my test to see how the Alfa just by itself blew away a Hawking equipped with a High Gain Directional Antenna.

If you live in a Urban Area, Campus or the Suburbs
Alfa 1000mW + 5 dBi antenna + 9 dBi antenna + Suction cup mount

Best Deal, BEST Choice
Alfa 1000mW + 5 dBi + 9 dBi + Suction Cup Mount

If you live ONLY in a Urban Area, Dense WIFI Area

You do not really need the 9dBi Antenna, but hey, it's almost the same price ($5 difference. Seriously, get the previous one) This one has no suction cup mount either. (Told ya! get the previous one.....)

Alfa 1000mW, 5 dBi antenna

The Network Adapter is provided with a 5dBi hi-gain Antenna. Due to the nature of the WiFi RF, you do not need a ultra long range antenna, RF are bouncing between buildings and you can not expect to reach long distance: You line of sight is fairly limited, but the power of this USB adapter and it's sensitivity are more than enough. I get over 45 AP's with a 5dBi in the 'burbs

If you live in a Bunker, Deep Basement or a Cave.
Get this 15ft USB extension. It's almost cheaper than rope!
If your cave is really deep, get 2 + a hub, or an active USB . I know .... big expenses! and keep on reading, it explains why you should get a USB extension Vs. an Antenna Cable Extension (Cheaper & Better)

Suburb / Wardriving

The equipment provided in the box should suffice.
If your suburb is sparsely populated or if you are in a dense wooded area, you may want to use the 9dBi antenna.
Magnetic Mount Antenna : Easy Wardriving, or for having the antenna outside.

For Wardriving, you can add the GPS, always useful ;-) I am having a blast with it.
For GPS, I would avoid Holux like the plague: As soon as it's sold, you are on your own. They have no support whatsoever and the worst consumer service this side of the universe

How to get a better WIFI Signal Explained here
Cable Vs USB explained here

Not compatible with KisMAC

Alfa AWUS036NH (2000mW) has a different Chipset, (Ralink RT3070 ) NO drivers available for KisMAC yet.

Gsky Blue Proton should work, it's a knock off of the Alfa, But this card is known as junk. I do not endorse this card nor provide any support for it. when you buy it, don't forget the Kleenex: You Are Going To Cry.

Rokland N3 , not compatible

By experience, I came to realize that spending 8 hours to get a half baked fix in order to save $5 was not worth it. If you believe that your time is worth 62 cents per hour, feel free.......
Shipping back a junk card will cost you more than getting it right the first time.

Copies, Knock Off, Counterfeit Cards

Example of an Un-Authorized "Reseller" on eBay: Copies & Knock Off
For your own sake, only buy from Alfa Authorized Dealer: 3 only in the US

Example of an UN-Authorized dealer. I do not know if they sell counterfeit Products, but if you read the fine print..... I have highlighted that for you ; -)

...undamaged item in its original packaging (where packaging is applicable). Packaging should be the same as what is found in a retail store, unless the item is handmade or was packaged by the manufacturer in non-retail packaging, such as an unprinted box or plastic bag

and get a "big picture"

Copy of the comments left on the eBay page of an unauthorized reseller.

Kismac: The Ultimate WiFi Stumbler

2011-06-14T23:00:00.001-04:00

How to Crack WEP / WPA Step by Step
KisMAC for Dummies & Step by Step KisMAC Tutorial
KisMAC Tutorials for dummies, beginners & advanced users

Update of update : a Brand New Improved Video in HD, con la musica muy entertaining is available at the end of this post. it should cover KisMAC 101 and walk you trough WEP and WPA cracking

For the curious, advanced users and KisMAC geniuses , we have the following articles available:

Best Wifi Card for KisMac about 20 X more powerful than Airport or Hawking

Troubleshooting KisMAC
KisMAC Q&A
Cracking WPA with KisMAC
KisMAC Resources
KisMAC Deep Digging , Advanced Features
How To Install Aircrack On Mac

Best Wifi Card for KisMac about 20 X more powerful than Airport or Hawking

Before you post a question, PLEASE be sure to Read the 3 following post:
KisMAC + KisMAC troubleshooting + KisMAC Q & A

Once you are sure that the answer to your question can not be found, Please, Post your question in the Q&A Article: CLICK HERE.

ALL QUESTIONS WITHOUT KisMAC Version and OS Full Version will be ignored. Please Include Model and FCC number of the Network Adapter (the USB thingy) if applicable. And YES the FCC number is on it! and NO, it's not the MAC address.

Cracking WEP with Injection
Cracking WEP without Injection (Airport, Airport Extreme)
Cracking WPA
KisMAC Troubleshooting Guide
KisMAC Resources Dictionary file, Password list, etc

KisMAC is a free WIFI Network discovery tool and has a large array of powerful features: Detection, Authentication, Injection, GPS, and the ability to crack WPA & WEP keys.
KisMac is really powerful and leave Windows based NetStumbler in the dust. By a large margin.

Kismac is not for absolute beginners and the first step with KisMAC is to read the FAQ. The second step is to read the FAQ again.

Just a little legal warning:
- It is illegal to download, possess, and/or use Kismac in Germany, Austria, Switzerland and Lichtenstein (StGB § 202c)*
- It is illegal, in most countries, including the USA, to crack or attempt to crack, penetrate, listen to, intercept, or “Inject” any WI-FI network others than yours, or Networks where the unequivocal permission was not given to you by the rightful owner.
- Kismac is a tool that should be used on the sole purpose to check and/or verify, audit your own network

Now that I warned you :-) you can enjoy it!

Cracking WEP with Re-Injection

Whatever you do, if you have an injection device (WIFI card or USB Adapter) DO NOT install the drivers of the card / USB adapter.
DO NOT INSTALL DRIVERS FROM THE CD PROVIDED WITH THE DEVICE

How to Crack WEP Step by Step

This tutorial is solely for you to audit your own network. I take no responsibility whatsoever, implied or not.
If you NEED an access, just ask politely your neighbor and either share the cost or discuss with him. A six-pack can be used as lubricant.

Cracking with Injection device

(Hawking HWUG1 shown here, RT73 Chipset. DO NOT BUY THAT ONE

Read review and comparison before: best card is here

Best Wifi Card for KisMac about 20 X more powerful than Airport or Hawking

The most successful method by far, with one little issue: you will NEED a Re-injection device: Either a USB WIFI Adapter or a WIFI card.

But, here comes the trick:
-You cannot use any WIFI card: You must use specific ones.
The list of “approved” hardware is here: http://trac.kismac-ng.org/wiki/HardwareList
As of today, you can NOT inject packet with your Airport / Airport Extreme Apple card alone.

Step 1
Download KisMAC from a trusted source such as: http://trac.kismac-ng.org/wiki/Downloads
Install KisMAC
Plug your Injection device, Whatever you do, DO NOT install the drivers of the card / USB adapter, or you may dearly regret it.
Start KisMAC

Step 2
On the Tab KisMAC >>> Preferences >>>Drivers
Select your Injection device i.e. : “USB RT73 device”
If you have a doubt on what to choose, check the "approved" hardware list.

Click on “Add”
Check box “Use as primary device”
Select ~~“All Channels”~~ Correction: Select only 1-11 If you are in USA, 1-13 If you are in Europe, 1-14 if You are in Japan. In some Cases, Ch 12-14 can pick up interferences from other home devices.
Check box “keep everything”
Close Dialog Box

Step 3
On the main screen, select “Start Scan”
KisMAC is now listening to the accessible networks
Look for a network with a WEP key (column “ENC”), a good signal as well as traffic (see Packets and Data)
OR
Enter “WEP” on the search box (top right) and select “encryption” to filter the results

If the Column ENC is “NO”, the network is OPEN: No need of cracking anything
Once you have selected a network, look for the CHANNEL of the network, i.e 1, 2 etc …
Go back to Preferences >>>> Drivers
Select only the Network selected i.e 1

Step 4
Let KisMac work for 5 minutes collecting data
On the “NETWORK” Tab, select “Reinject Packets”
KisMAC will now try to reinject packets to speed up the process
Keep an eye on the “Unique IV’s” number, once it has reach at least 130,000 (200,000 is recommended) you may start considering cracking.

Step 5
Once you have collected enough, On the NETWORK Tab, Select “Crack” >>> “Weak Scheduling Attack” >>> “Against Both”
KisMAC will now try to crack the key…
Reminder: the more Unique IV’s you have collected, the greater are the chances to crack the key.
I have experienced crack as fast as 10 sec with 200,000 Unique IV’s (on a 64 bit key) and sometimes 30 minutes with only 110,000

If you know for sure that the key is either 40 bit or 104 bit, then select the appropriate one. If you are not sure, select "both"
40 bit is a 64 bit (40+24)
104 bit is a 128 bit (104+24)

If you have followed the steps, you should see something like that appears :-)))
remove the semicolon, and there you have it, or take a look at the main screen under Key or ASCII Key

How to crack WEP / WPA with Airport Extreme, Passive mode
WITHOUT Injection Device (Airport, Airport Extreme Alone)

WEP attack

Step 1
Read the FAQ http://trac.kismac-ng.org/wiki/FAQ
Step 2
Read the “Newbie Guide” http://trac.kismac-ng.org/wiki/NewbieGuide
Step 3
Download KisMAC from a trusted source such as: http://trac.kismac-ng.org/wiki/Downloads
Last build is 0.2.99 , build 0.3 is coming soon.

Install KisMAC
Start KisMAC

Step 4 (without an Injection Device)
On the Tab KisMac >>> Preferences >>>Drivers
Select your card. (Capture devices) i.e : Airport Extreme Card, Passive Mode
Click on “Add”
Select “All Channels”
Close Dialog Box, and select “Start Scan” on the main window
A dialog box opens and load the card. Your Admin password may be required.

Step 5
KisMAC is now listening to the networks accessible
Look for a network with a WEP key (column “ENC”), a good signal as well as traffic (see Packets and Data)
If the Column ENC is “NO”, the network is OPEN: No need of cracking anything
Once you have selected a network, look for the CHANNEL of the network, i.e 1, 2 etc …
Go back to Preferences >>>> Drivers
Select only one Network selected i.e Channel 1

Step 6
Be patient: open a beer, pour yourself a nice glass of wine or have a nice cup of coffee.
Without an injection device, you will need to collect a minimum of 130,000 unique IV’s before you can start cracking a 40/64-bit WEP
Recommended:
200,000 Unique IV’s for weak scheduling attack on a 40/64-bit WEP
1,000,000 Unique IV’s for weak scheduling attack on a 104/128-bit WEP
Or
500,000 packets for weak scheduling attack on a 40/64-bit WEP
2,000,000 packets weak scheduling attack on a 104/128-bit WEP
It may take a long time….

Step 7
Once the packets are collected, Go to the tab “Network” >>> Crack and select the method,
For a start, I would suggest: “Crack” >>>”Weak Scheduling Attack” >>> “Against Both”
Once started, you’ll have to wait between 5 and 20 minutes depending on your machine for KisMAC to try all the keys.
The more packets you have collected, the better are your chances to be able to crack the key.

WPA crack / Attack

>>>>> Packets RE-Injection DOES NOT WORK on WPA attack <<<<<<
>>> I said RE-Injection and not "Injection"

In order to crack a WPA key, you'll need the handshakes, a serious dictionary file or fileS and a LOT of CPU time. Hours and probably days of it. (read the "I am bored part" at the end)

You first need to capture 4-way EAPOL handshakes (connection between the computer and the network) -When captured, you'll see the Ch/Re red dot turns green. You are ready to try...

To speed up the process of capturing the 4-way EAPOL handshakes, you can try a deauthenticate attack: it will force the network to shutdown and restart, hence speeding up the process.
Go to Network >>> Deauthenticate
Some network may recognize the attack and change channel.

Once the Ch/Re is ready, Go to the tab "Network" >>Crack >>WPA
It will then ask you for the dictionary file, select the file you want to use, and start...

Nota Bene:
KisMAC will try every word (from the list provided) to attempt to crack the key, hence it may take a lot of time....if you have a slow machine, be really patient.
I have a not so bad machine, and I run about 170 words per second. You can leave a comment with your config and speed for me to compare.
Mine: MacBook Pro 2.5GHz Intel Core 2 Duo + 4GB DDR2 SDRAM : about 170 Word/sec

As for the Dictionary files, you can find links on the KisMAC website or take a look at the "RESSOURCES" post.

Note on dictionary files:
Wordlist = dictionary file
- The words are tested "as is" and not in combination.
Example: the password is "I love Kismac"
If your dictionary contains the words "I" + "love" + "Kismac" it will NOT work, your wordlist must contain the exact (verbatim) "I love Kismac" as a word to successfully attempt to crack.
The files must be a text format .txt and contain a empty line at the end.

KisMAC Troubleshooting Guide , KisMAC Issues, KisMAC Ressources are on the NEXT post....
KisMAC for Windows, ditto...next post

WPA: Wordlist links and files Download are here

KisMAC Ultimate Stumbler Ressources & Troubleshoot

2011-06-14T22:00:00.000-04:00

Troubleshooting KisMAC
KisMAC Tutorial

Resources

After a long and thorough research, it appears that the distribution of KisMAC errors and bugs are as:
0.7%     SOL Errors (Shit Out of Luck)
0.87%   Real bugs (Apple updates, changing things , etc )
1.34%   Incompatibilities with OS (Mostly Windows users)
92.09% User errors, mostly due to urgency, lack of preparation or reading and a strong belief to entitlement.
5%        User IQ does not permit the use of such tool.

If your question is somewhat technical, please state your:

>> OS + KisMAC Versions

>> Type of Network Adapter + FCC number

>> Errors in console log (no need to send me the 4000 last lines)

Troubleshooting KisMAC

KisMAC 0.3 Bugs
KisMAC 0.3 Issues
KisMAC 0.3 Not Working

KisMAC 0.3 Bugs, KisMAC 0.3 Issues, KisMAC 0.3 Not Working

-Did you noticed that KisMAC 0.3 is for Snow Leopard 10.6 ? and not for 10.5? ok....

Can't Scan with KisMAC 0.3

"NOTE: If a previous installation of KisMAC has been used, please make sure to delete the following files, if they exist:" ( '~' is your home folder) (Using App Cleaner IS a GOOD IDEA)

~/Library/Preferences/de.binaervarianz.kismac.plist
~/Library/Preferences/com.kismac-ng.kismac.plist
~/Library/Preferences/org.kismac-ng.kismac.plist

Message
Could not instantiate driver. KisMAC has not been able to load the driver backend
Could not initiate driver. KisMAC has not been able to……

Whatever you do, if you have an injection device (WIFI card or USB Adapter)

DO NOT install the drivers of the card / USB adapter.

Possible causes:
You have NOT selected "Use As Primary device"
You Have NO Drivers selected
You have Selected the Wrong one
Your Chipset is not supported (see Hardware list)
The Chipset of your USB Network Adapter is not correct (See FCC Number)

If you look in your console.log (Spotlight >> Console)
you'll probably see a lot of lines with KiMAC as "sender" and an error messages such as:

KisMAC[2928] vendor 1452 vendorId 3574 product 32773 productId 38674

KisMAC[2928] Matching finished

KisMAC[2928] Error could not instantiate driver WaveDriverUSBRalinkRT73

Reading the last line, you can easily guess where the issue comes from: RT73 driver can't be loaded. Why? because you specified to KisMAC not to, or Specified to KisMAC to load the wrong one.
Solutions
Select Appropriate Driver or use the proper USB Network Adapter. You may need to Force Quit the application
You have installed drivers provided with the CD of your USB Network Adapter.
Solution 1:Time machine? if you have Time Machine set up, pat yourself on the shoulder: smart guy!
If not, time to think about it and move onto Solution 1.5

Solution 1.5:
Uninstall the drivers and the all shebang provided with your injection device
including the proper .plist for Kismac
use AppCleaner to remove all .plist
OR if you had a previous install, remove the following, if any:
~/Library/Preferences/de.binaervarianz.kismac.plist (where '~' is your home folder)
~/Library/Preferences/com.kismac-ng.kismac.plist (where '~' is your home folder)
~/Library/Preferences/org.kismac-ng.kismac.plist (where '~' is your home folder)
(told ya' use AppCleaner)

Solution 2: If, after uninstalling the drivers, the problem persist, -and- you have trouble with your Airport Extreme, you may be in for a shitload.
Uninstall KisMAC, and re-install

Solution 3: >> Apple Store, Genius Bar or Re-install OS X with the archive option.
I have experienced advanced trouble by installing drivers provided with an Edimax. It F**** up the Airport Soft, Archiving and re-install was the only working solution for me.

Injection does not work
- Check that your device (USB/Card) is able to inject
- Test injection: Tab “NETWORK” >>>”Test injection”

- Check that you have checked the box “use as primary device” in tab Preference >>> Drivers
- Check that you have the proper driver/chipset selected i.e. USB RT73 or USB RT2570 (Preferences >>>Driver)
- Check that proper channel is selected. One channel only: You cannot inject while Channel hoping is selected

- As stated, be very careful to have the proper chipset, otherwise: nada!
Word of advice, I would suggest you to test the hardware in a “brick and mortar” shop before you buy something that will not work.

Packet collection is very slow
It’s probably because the network is not very active (low traffic). Just go on YouTube, watch few videos and the packet collection should increase very quickly.

Crack does not work
-Well, as stated in the FAQ, Injection is the bleeding edge of this technology, and I have experienced myself some failures with my own network: I was unable to crack my own key with more than 1,000,000 unique IV’s.
Other possible causes:
The key was changed during the collection
You have selected a 40/64-bit WEP when the key is 104/128-bit WEP, so in doubt, play safe and select both
You have encountered a SOL error: Shit Out of Luck

The wpa key could not be recovered because of the following reason:
the key was none of the tested passwords.."

Most likely, your dictionary file does not contain the exact password, read the article about wordlists.

WPA Reinjection Does Not Work
please note that RE-Injection and Injection are not the same.

-WPA RE-injection will not work, you can only RE-inject on WEP network, if you have an injection device. (i.e When you Deauthenticate , you are injecting frames)

Could not load Airport Driver

KisMAC could not attach to the Apple Airport Driver

This Error Can Have Multiple Origins, Please Read Carefully.

KisMAC could not attach to the Apple Airport Driver
In Preferences >>> Driver
You may not have selected any Driver (Apple Extreme, RT73, etc etc )and pressed the "Start Scan" button multiple times, this provokes a freeze and return this error.
The "Start Scan" button looks like the one in the picture below (button engaged)
The solution is a Force Quit and to select a correct driver in Preferences >> Driver

KisMAC could not attach to the Apple Airport Driver
Cause: Airport, Airport Extreme in ACTIVE Mode
This issue is fairly new and is related to the brand new Snow Leopard (10.6)
You have this error because you have selected Active Mode
Close KisMAC , re-open and select Passive Mode.
Do not use Active Mode with OS X 10.6 until further notice.

No Driver Selected
Please Select a WIFI Driver

Go back to Preferences and Select a Driver
i.e. Airport Extreme Passive Mode, USB RT73 Device, or else.

KisMAC Ch/Re Gem
The Ch/Re Gem is situated on the last column, right after "last seen"
Ch/Re stands for Challenge / Response
The Gems have 3 colors possible: Green, Orange and Red and the meaning will depends on the type of encryption of the Channel/Network

Enc = NO
The Network has no encryption (Open), (under column "Type") the Ch/Re Gem is green by default
Enc = WEP
The Network is encrypted by a WEP key, the Ch/Re Gem is red by default and indicates that Kismac does not have recovered a key (yet) No Challenge or No Reponse
Green Challenge or Response
Orange has a Challenge OR a Response
Enc = WPA
Red: No handshakes captured, don't even try a wordlist
Orange: Capture Started (?)
Green: Handshake Captured

KisMAC Freezes
KisMAC Hangs

KisMAC Freeze, KisMAC is hanging, KisMAC Freezes, PinWheel KisMAC

If KisMAC Freezes after few seconds, and hangs (Pinwheel) the first cause that comes to my mind is that you are using (listening to) the wrong channels.
If you are in USA, you should not be using Channels 12,13 & 14 (Europe and Japan)
If you are in Europe, You should not be using Channel 14 (Japan Only)

Just uncheck 12,13 & 14, that should resolve the problem.

Possible cause: Channels 12,13 & 14 are close to the microwave range and cordless phones (old ones)
It's possible that you are listening to your coffee or pop corn.
A second cause could be a large number of router using the same channels (often Ch 6), it may also create issues on your own network. In that case, just switch channels and you'll see an improvement in your Network quality

Can't Collect IV's
Can't Collect Packets
Packets Collection is very slow

I have received a lot of questions about this issue. The most probable cause is a non active network.
A non active or slow network (low traffic) is what makes the collection very slow.
KisMAC in passive mode is like trying to collect rain water: The more it rains, the more you can collect. That simple! If it does not rain .... or very little ... you got the idea!

After receiving 10 + questions on the subject, here is an example of a near silent network:

As you can see 614,847 management packet (beacon) and only 25,945 Data Packets (the good stuff)
so, 615,902 junk.
This network is simply "on" but not used, hence, as long as there is no valid traffic, you need to be more than extremely patient

Other possible cause: You may be listening to a Probe, or a Router not connected to the internet, or someone that left his router on, but does not use it. Read the post till the end...

Here is what I have tested with active networks, and very active networks. It clearly shows that the collection of IV's is related to the traffic.
The test is with an Airport Extreme, Passive Mode, NO Re-injection
It took me 5 minutes to reach 130,000 IV on very active network, and 126 min on Active.
For the numerous persons that still believe that Kismac can not crack on Airport Extreme, the following is going to be surprising:

Very Active Network
Time : 0:02:05 2min, 5 sec
Bytes: 83.42 MiB
Packets 58,423
Unique IV in 0:02:05 = 57,016
U IV/Sec = 456.12
Theoretical Time to reach:
130,000 = 285 sec = 4.75 min
200,000 = 438 sec = 7.30 min
300,000 = 658 sec = 11.0 min

Active Network
Time 03:23:50 3hrs 23 min 50 sec
Unique IV's in 03:23:50 = 210,216
U IV/Sec = 17.18
Theoretical Time to reach:
130,000 = 126 min
200,000 = 191 min
300,000 = 285min

1 As Kismac has loaded the Airport Driver, he has control over it. Proof that this is on Airport and not on USB
2 Time
3 Packets
4 Unique IV's Collected with Airport Extreme on Passive Mode.

a Kismac still on Airport
b Time 2min and 5 sec
c Unique IV's Collected with Airport Extreme on Passive Mode. = 57,016 in 2 minutes, roughly 11 min to 300,000
d Bytes = 83.42 MiB for 57,000 IV's

Hence, Kismac does work on Passive Mode, and yes, you can crack on Passive mode without Re-Injection. If you can't, it's probably because of the network quality or simply because you may have selected a wrong parameter.

Test Your Own
One way to be sure is to test your collection speed:
Go to a friend's house , Start KisMAC , and ask your friend to watch multiple Youtube Video on its network. You want to push the router to the max.
You'll be then able to see if the issue is due to slow network or not.
While you're at it, ask your friend to run KisMAC too: You'll be surprised to realize that you can:
A) exchange PCAP dump files and try multiple cracks on multiple networks
B) if using Re-injection, notice that ONE device will make ALL Macbooks able to pick up the responses

Macbook does not detect edimax ew-7318usg

It's NORMAL! Don't panic!!!
Your Macbook can NOT detect your Edimax, because your driver(s) are not installed.
KisMAC will detect your edimax, under Preferences >> Driver >> use USB RT73 Device
DO NOT INSTALL the Drivers provided with the install CD of your Edimax
if you do so, or have done so, please refer to Troubleshooting KisMAC.

Kismac weak scheduling attack takes a long time
A Weak Scheduling attack may take some time, but you (yes, YOU) can make much faster:
Don't start cracking unless you have a mini of 130,000 IV's
200,000 is recommended
You may have collected corrupted packets, Sorry: S.O.L , try again
Rule of Thumb: The More IV's Collected, The Faster The Crack Will Be.

Another solution is to install Aircrack-ng: Collect packets (collect or re-inject) with KisMAC, Crack with Aircrack-ng: it's 10 X faster

How Many packets I need for WPA?
None! For WPA, you need to capture the Handshakes.
Look at the Ch/Re Gem indicator , or read the post related to that question.

How Many unique IV's for WEP?
Number of unique ivs needed kismac?
KisMAC: It is recommended to start at a minimum of 150,000 unique IV's
You can always try under, but it will probably fail or the key recovery may take much longer.
Aircrack-ng: As little as 40,000

How fast can I successfully crack a WEP or WPA?
How fast can you crack a WEP key?

You just opened a can of worms ...
WEP
KisMAC: The more IV's you have collected, the faster the crack should be.
I have successfully cracked my own WEP key in less than 3 sec (128 bits key)
I also have, on the same key, spent hours with no success, .... I had up to 2 millions IV's
I suppose some frames were corrupted, but I can't say for sure. I made a Video on YouTube showing a crack in less than 3 seconds.
Aircrack-ng: 1 second on a 64 bit key with 40,000 IV's

WPA
It will depend on your password. If you use a dummy password*: between 5 sec and few hours.
If you use a GRC generated password, you better explain to your kids how to do it: they will continue your work long after you'll be dead. Seriously!

If you NEED an internet connection because you just moved, are in a new place, can't afford the monthly overpriced FIOS or UberDuper connection, then you'll need a SA-6p, SA-12PSA or SA-24PO
it's not software anymore, it's hardware, but I was successful in cracking a WPA2 in very, very, little time.
I have heard of BIM attack with Ha100B series, but I never tried it myself.

BTW: Dummy passwords: lists ARE available :-), I URGE you to use very serious password and avoid at any cost guessable passwords such as: 123456, 1234567, password, letmein, mustang, iloveyou, etc etc ...

PCAP Dump
When you check the box "Keep everything" it start saving a file where a bunch of details are kept.
This file is accessible for later review (advanced user only, please) you can use Wireshark to read that file and discover all the little tiny details ;-)

Console Log (from Console.app)
it's the log of what is happening behind the doors when you use your computer.
If you keep console log open, you may find messages such as "Warning, deauthentication Frame received"
It means that somebody is trying to penetrate your network with a Deauthentication attack. (more exactly, trying to force capture the handshakes)

KisMAC Freeze, KisMAC is hanging, KisMAC Freezes, PinWheel KisMAC

KisMAC Questions & Answers

2011-06-14T21:00:00.000-04:00

KisMAC Q&A

Please, before asking, be sure to read the all stuff. Answering 5 times the same questions is time consuming.
There is a "Search" for the blog on the top left corner. Thanks!

ALL QUESTIONS WITHOUT KisMAC Version and OS Full Version will be ignored or Flamed. Include Model and FCC number of the Network Adapter (the USB thingy) if applicable. And YES the FCC number is on it! and NO, it's not the MAC address.

Image courtesy of Belkin

Example:
Kismac + OS X = Ignored

FCC ID : MAC 01:23:12:20:ff:88 = Ignored
KisMAC 0.3 + OS X 10.6.4 = Answered
Kysmaxx + win 95 = Flamed

Question:
"I got a pbm to get a wpa key.
I got the data packets ok, I get the green light with the deauthentification, but when I ask to find the wpa I get this:
"the wpa key could not be recovered because of the following reason: the key was none of the tested passwords.."

Answer:
The file used needs to have the exact password in it. The words are tested "as is" and not in combination.
Example: the password is "I love Kismac"
If your dictionary contains the words "I" + "love" + "Kismac" it will NOT work, your dictionary must contain the exact "I love Kismac" as a word to successfully attempt to crack.
Be also sure to use a proper formatted file: a simple .txt will work perfectly.

-----------------

Question:
2 questions :
- to crak wpa key what kind of USB device i need ? (name please)
- what does mean dictionnary file !??!

Answer:
Dictionary file OR Wordlist are files containing simple words or sentences to be tried against the key. They often contain 100,000's of words related to a subject, i.e. last names, first names, Yiddish words, bacteria, etc .. You can also find the 500 most used passwords
Or take a list and expand it by modification or concatenation*

Excel wordlist expander
link posted : http://aloah.free.fr/Mactips/home_En.html

*Concatenate: to add strings together. "qwerty" +"1234"= "qwerty1234"

-----------------

Question:
I can't collect IV's

Answer:
Look at the troubleshooting article, multiple answers posted

-----------------

Question:
what kind of USB device i need?

Answer:
Already posted multiple times

-----------------

Question:
I can't seems to be able to collect IV's / IV's Collection is very slow

Answer:
You need to look first at the number of packets collected:
Packets
Data Packets
Management Packets
Control Packets
Unique IV

We are looking at the ratio between Packets and Data Packets. Data Packets is the good stuff.
If you have a lot of packets with a lot of Management packets, it means that you are listening to a non-active network. A bit like if you listen to static on radio: Nothing good to listen to.

To give you an example, I have at home multiple WiFi Devices. Some are Wireless Backup HDD.
So, if you come near buy, you'll see multiple network. The Issue is that the Wireless Backup is NOT connected to the internet, and only "working" when I am doing a backup. So you could listen for a long time, getting management packets, but zero IV's, and very little good stuff.

The Other issue could be that everything is ok, but the connection is not very active. Somebody left the computer on and went to work. Almost no traffic. Packets collection is going to be slow.

What injection device should I use?
-The list of “approved” hardware is here: http://trac.kismac-ng.org/wiki/HardwareList
I have tried the Edimax EW-7318 USg, Hawking HWUG1 & HWUG1A (about $40)
The KisMAC Team highly recommends the Alfa AWUS036H (about $50)
I am not really impressed by the sensitivity of the Hawking “as is”, you may want to consider a high gain antenna, or the Alfa AWUS036H for better results.
I’ll try the Hawking with a directional antenna and post results, if any.

------------------

Question:
Can I use KisMAC with XP?

Answer:
Dear,
I am surprised: how can you write if you can't read? Are you two? one can read, one can write?
If so, ask your twin for an answer.

-----------------

Question:

J said...: hi there, congrats for the nice job here.... i woud like to ask you if on a MBP I get a usb device rt73 Hawking HWUG1 for ex, do I need to install subversion, xcode and compile kismac explained on this link? http://screammy.name/projects/kismacmacbook/ I really hope not.... :) Will you advice me about the USB devise "rt73 Hawking HWUG1 "and "rt73 Hawking HWUG1A" , whats the diference between them and your opinion about this USB DEVICE "D-link DWL-G122? This blog will be from now on my favorites... Thanks in advance and keep the good work J. Answer(s)..
Hey J, thanks for the cheer up.
Do I need to Compile KisMAC? ABZOLUTELY NOT
the post on screammy.name is from 2006 (updated in 2007) ... KisMAC has evolved ...
~~"The current distribution of KisMAC does not allow you to use the AirPort Extreme card in passive mode"~~ Yes it does...
Assuming that your are on OS X 10.5 or 10.6, Just download the version 0.2.99 available by link here:
http://aloah.free.fr/mactips/Menu.html Via the Download Menu; Then Watch the video "how to" http://www.youtube.com/watch?v=lBGN5OGCPgI
Watch Again. (specially the warning) If you don't, you WILL be sorry. Breath, take a break, and watch again.
Hawking To the best of my knowledge, the difference between the two are: one is 11g and the 1A is 11n.; As for Hardware, what you want to be sure about is the chipset.; The chipset is the "engine" Never mind the body, you care about the engine.; hint: double check the FCC number (and you'll realize that different brands have the same engine); If you buy a non compatible....Kiss good bye to your $ D-link DWL-G122 has different revisions number : http://trac.kismac-ng.org/wiki/DWL-G122 So, I would apply the following formula: (CFU x D) -MS ^SOL; CFU = Chances of F* up; D= Distance; MS= Money saved; SOL= Shit out of luck factor.; In Short: Save 10 bucks to be in trouble and re-ship the all stuff and wait 2 weeks. Do not get your money back for the shipping, and get upset because "I did not know"...; Hawking, Edimax, Alpha or anything known to work without issues .... ;-); I suppose you will read the troubleshooting and Q&A completely. You will save a great amount of time by doing so. How much time? Well, can you do it is less than 4 seconds?; Queries from Goog Analyticskismac ch/re >> Green, Orange or Red. All others colors are products of your imagination. - This is your way of asking a question - direct from the search bar in Google. If you have arrived here, it's probably because your question was formulated in a strange way, but you are very close to an answer, just use the search on the top left of the blog. I'll provide very short answers below Injection Airport Extreme >> Airport extreme can NOT inject or Re-Inject kismac could not attach to the apple airport driver >> 99% chance it's your fault. look into "Preferences" Kismac injection does not work >> Test injection (Command + T) Kismac injection not working >> Test injection (Command + T) kismac weak scheduling attack taking long time >> Look at troubleshooting kismac ew-7318usg tutorial rt73.plist >> App Cleaner ?? mac uninstall kismac >> App Cleaner + Plist Question: ..I have an issue with KisMAC "hanging" for some minutes in a specific channel... it's not always the same, but 'till this moment it has only happened with ch 11, 12, 13 and 14... the other channels pass fast, but on these channels it "hangs" for some minutes and then continues the scan... Answer: Uncheck the Channels 12, 13 and 14. Those channels are not used in most countries and it can create interferences: You are probably trying to listen to a microwave oven or an old cordless phone.

Because you've read so far, you can try to email me (Re-Captcha Protected)

Cracking WPA with KisMAC

2011-06-14T20:00:00.000-04:00

Cracking WPA with KisMAC

1) How To
2) Probabilities
3) Energy Needed
4) Size of Wordlist files

I have received a lot of questions in regards to cracking WPA with KisMAC, or any other "WPA cracker"
Alas, a lot of them showed deep signs of misunderstanding in regards to the basics of WPA. (Not WEP, WPA!)

If you are here for the dictionary attack files, you may want to consider this page HERE
You may make a small donation and receive a pack of State-Of-The-Art WPA Dictionary Attack files or Wordlists

For the Top Used Passwords, it's here
For Installing Aircrack-ng on your Mac, it's here (10x recovery speed)

Otherwise, if you are on the cheap side, and before I start, I would suggest you to watch the following video. If you already know KisMAC jump directly to 05:14.
If you are not a KisMAC expert, watch it entirely. Take a pause. Repeat.
http://www.youtube.com/watch?v=Pyiz2Mct6dk

Few Things:
We are here, specifically talking about KisMAC & Aircrack, Not "pro" rated dedicated hardware or large scale operations (Electronic Frontier, CIA, NSA, Botnet & Al.)

- WPA passwords have between 8 and 63 Characters
- The only known (as of Jan 2010) vulnerability to WPA is a Bruteforce attack.
- A Bruteforce Attack is simply to try password after password after password.... either precomputed or listed in a file.

The password or "Key" in a WPA is "hashed", Hence when KisMAC or Aircrack "read" a password in a Wordlist, it has to "de-hash" the password 4096 times before really trying it!
The precomputed solution involves rainbow tables, the downturn is that you have to stick to precomputed tables.

A Bruteforce attack is:
a) Time consuming
b) The most "simplest" attack, hence the dumbest.
c) Time consuming
d) Not guaranteed to work
e) Time consuming

If you are in hurry, you can jump directly here and start downloading wordlists and dictionary files, but before you do, I would highly suggest reading the following or you may find yourself highly disappointed.

Tip #1 Having Aircrack-ng on hand and ready to run is a very good idea: It will make any recovery attempt about 10 times faster.

Tip #2 A Wordlist is only as good as the password listed inside. You can find wordlists of about 30GB in size that contains 99% junk. It's useless! and you waste 99% of your time.
A good wordlist should be composed of known password used by real people, and sorted by most used first: It may shorten you recovery attempt by few hours ....

You can create your own, download them, or take the shortcut

You can also read more about hacking Wireless: I personally highly recommend
the following book: Hacking Exposed Wireless, by Cache, Wright & Liu. Joshua Wright is the Author of the CoWPAtty software.
Everything is explained in detail, from the ground up.

Back to business: Cracking WPA

Step 1:
Capture the 4way Handshake
Before doing anything, you need to capture the handshake between the AP (Access Point) and the Client. The handshake is sent when a client connects to the AP. This process of "listening" to the AP-Client can take some time. In order to speed up this process you can use a Deauthentication Attack. The Deauthentication is a bit like a Ddos and will simulate a "kick out"and force the AP to respond.

Step 2:
Once the handshake has been captured (green gem), just use either:
KisMAC or Aircrack-ng. Just for speed sake, I use Aircrack. Aircrack is churning about 10 X faster than KisMAC when it comes to WPA.

As a repeat, How to install Aircrack Native on Mac

Why is it so long to crack WPA?

You may noted that I mentioned "Time Consuming" 3 times.
Here is why:
First, the shear number of possibilities is mind boggling! A WPA is between 8 and 63 characters long. (numbers, LETters and signs)

Second, a WPA password is "Hashed" and "Salted". No it does not mean "cooked"
it's the old trick of taking the character "H" and transforming it into a "Z" for example.
Now, if you do that on a table of 127 characters, multiple times in a row, it's getting complex to decipher.
Well, a WPA is hashed 4096 times ....
So, Aircrack-ng or KisMAC have to churn 4096 times before trying the password. This is why you'll see 99% resource used. The CPU is at full blast!
It slows down the process, and it's made for that purpose.

It is widely recognized that, you have a chance to find the password before you run the all test. That chance is 50%.
Hence, you -theoretically- could find the password in half the time needed to run all the possibilities.
That was the good news.

Now, the bad news:
Probabilities
Energy Needed
Size of Wordlist files

Let's assume that a "password" to be cracked is composed of 1 Character and only composed of numbers:   The possible solution is either : 0, 1, 2, 3, 4, 5, 6, 7, 8, 9
We then have 10 possibilities maximum.

Now, we move to a 2 characters password
The possible solution is either : 0, 1..., 11, 12, ....22, 23, 24....95, 96, 97, 98, 99
We then have 100 possibilities.
Adding a simple 1 character to the password made the possibilities jump from 10 to 100.
We understand now that it's not a multiplication, but the power of.
The issue?
We said previously "WPA is between 8 and 63 Characters"
Numbers : 10 Possibilities per digit
10^8 = 100,000,000.   That is 100 million possibilities
If the password is 63 Characters long:
10^63 = 1,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000

That's a vigintillion (!)

And this number is only for passwords made only of numbers.
Now, go get an Advil and come back after.

Picture that: Each password has the size of grain of sand! very fine sand, about 0.15mm
ok? Pictured?
Now, you have Aircrack-ng installed, and run about 1750 passwords per second
Let's assume that you know that the password is made ONLY of letters, mixed Cap.
You also know that the password is 10Ch long, something like that: "MyPassWord"

As you do not have any statisticaly sorted Wordlist, you'll try them one by one, starting at:"aaaaaaaaaa" and finishing at "ZZZZZZZZZZ"
So: "aaaaaaaaaa" "aaaaaaaab" "aaaaaaaaac" "aaaaaaaaad" etc etc

You now have an hourglass, and the sand flows at a rate of 1750 grain of sands per second....
So, your 10^52 possibilities translate by an hourglass of ? size please?
Only 60 cubic miles!
at the rate of 1750 grains/second, you will fill a inch cube in about 45min , or a cubic foot in a bit less than 54 days...
That is unless you have a statistically sorted Wordlist.

Possibilities by Character type:

Numbers only:                         10 per Ch.
Letters, lower case                   26 per Ch.
Letter, lower and upper case    52 per Ch
Numbers + Letters                   62 per Ch
Numbers + Letters + Shift 74 per Ch    !@#$%^&*()_+
Printable Characters                127 per Ch    (including "space")
Full ASCII                               255 per Ch   (including "space")

So, here we are.
A very stupid "average password" length of 9 Ch, composed of letters only, will run at:
2,779,905,883,635,710 possibilities.
If the "password creator" had the bad idea to use the full range: 4.55892E+21 possibilities.

So, as KisMAC runs at about 150 passwords per second, you can expect to crack a WPA using "blind bruteforce" in a bit less than ......

Take a guess...

6       Months?
13,7 Years?
900 Years?
131 Million Years?
Longer than the universe has existed?
10 times longer than the universe has existed?

And your answer is .... ?

Click here to find.

So....
Doubtful?

Okey, I know .... rainbow tables, precomputed tables, distributed attack and Moore's Law.
So, your dad is Bill Gates, and he buys you 100,000 computers running each at 1,000,000 passwords per second.
Still, a mere 23,611,832,414 years to go.... Still twice as old as the universe.

If ALL the people on earth had a laptop and were doing it simultaneously, it would still take 2.2 billion years to crack a random password type: -M ^7$:@é

The mythical googol number 1 and 100 zeros is reached at 42 characters ASCII password: 1.1876E+101
So, the odd of cracking a 42 ch at the first try is equivalent to tossing 333 coins in the air and having all of them landing on the head.

But here comes the funny part....
Supraconductor CPUs are not invented yet .... hence, you consume energy and produce heat ...

My MacbookPro, as per Apple, can consume up to 263 Watts and produce up to 800 BTU/h on intensive use. Password cracking is very intensive.
Where i am, a kWh is about $0.20

So, what could be the cost of running a Bruteforce attack on a 9 ch long password, full ASCII?
Very simple ... time x power needed = 4.98681901 × 10¹⁶ gigawatts
In short, you'll need more electricity than the world produced in 2006. About 3 times more.
The electrical bill would bankrupt the USA, and you'll produce a heat wave able to boil an ocean.
BTUs speaking, it's equivalent of burning: 1,196,836,561 Billion of gallons of gasoline
or just 7,978,910,409,456,55,000 Cords of wood (a Cord is 3.6 cubic meter (for you metric adorateurs)

The cost of the joke, as of 2010, would be $ 9.9 Trillions of Trillions of Dollars.

So when I hear, or see, people pretending cracking WPA in 75% of instance in less than 2 hours... I have some doubts ... I seriously would like to see that with my own eyes.
All demos on YouTube are showing either: Password known by the demonstrator or pseudo test made with 2 ch left to find.

In my humble opinion, cracking in "Blind mode" is just pure waste of time and electricity. You have greater chances to win the lottery than to crack a random 15 Ch in your lifetime. (with our actual possibilities)

The third reason why I don't try in "Blind Mode" is the shear size of the Wordlist(s).
Let's take a look and assume that you know that a password is only composed of numbers, and Oh! luck! it's JUST 8 Characters. In Short a baby WPA password.
As you do not know any of the numbers of the password, you decide to create a wordlist with a generator
Starting at 00000000 and finishing at 999999999 (all permutations)
the result will create a dictionary file (.txt) of 954 megabytes

For the Geek of it , look at the following table
Numbers Only
8 Ch       954 megabytes
10 Ch     114,688 megabytes
15 Ch    16,106,127,360 megabytes or just a bit more than 31,500 500GB hard drive.
As for letters, lower case only
8 Ch       2,097,152 megabytes
10 Ch     2,147,483,648 megabytes
etc etc ...Got space?

You have now grasped the issue: Running a Bruteforce Attack on blind mode is highly inefficient

If you go "pro", yes, you could: Very large distributed attack can run about 90,000,000,000 tests per seconds, and consume enough electricity to sustain a small town...
I suppose now you understand why Phishing was invented, ditto for Keyloggers.

Nevertheless, you'll be (-may be-) able to crack if you use your brain before.

Test with known passwords first and develop from there.
Use appropriate dictionary files (the Russian one will not help you if you are Japan)
Use your brain
Precompute when possible, If possible
Look for existing data on password occurrence (what is the average password length, most used characters, least used , language, etc )
If you NEED a connection, just ask your neighbor (politely)
Use a 6 or 12 pack as lubricant.
USE Flowers or chocolate if your neighbor is a "she". You may get more than one connection.

You may have heard of the Yahoo! password heist.
10,000 passwords and emails listed on the web, plus another 30,000 accounts of Gmail and Comcast compromised.
According to serious sources, the list was a possible snippet of 250,000 emails and passwords for resale.
Email? not a big deal, huh? who cares? they just need to read your emails, go to your online banking, and reset the password. They will get the message. You won't ....
I could not access the list on time*, but the excellent Reusable Security Blog did
Here is his (Matt Weir) analysis about what you use

*I did later, Including the amazing RockYou heist : 32,600,000 passwords

So on to the analysis:

Total Passwords: 9,845 - This number excludes all the e-mail addresses that had blank passwords
Average Password Length: 8.7 characters long
Percentage that contained an UPPERCASE letter: 7.2%
Percentage that contained a special, (aka !@#$), character: 5.2%
Percentage that contained a digit: 51.7%
Percentage that only contained lowercase letters: 43.3%
Percentage that only contained digits: 17.6%
Percentage the started with a digit, (aka '1password'): 25.0%
Percentage that ended with a digit, (aka 'password1'): 44.1%
Percentage that started with a special character: 0.5%
Percentage that ended with a special character: 2.2%
Percentage that started with an uppercase letter: 6.1%

Overall letter frequency analysis:

aeoi1r0ln2st9mc83765u4dbpghyvfkjAzEIOxRLwSNq.MTC_DB-UP*G@H/ZYF+VJK,\$&X!Q=W?'#")(%^][}< {`>

First character, letter frequency analysis:

a1mbc2sp0lterdjfgn3hi6k759vo48yAwMzBSCuqPLExJRTFDGNV*HOZYKI\W@/-+(.$U&?Q^[,#

Last character, letter frequency analysis:

aos01326e57849nrilydzmtuAhbO.gck*SxpfE@+LvjNRw_-I?/$q!ZX)YKH"UPMDCB#GF'&%}T,]\VJ(

As a repeat, the previous is from Matt Weir, from Reusable Security

          Last but not least:
         GOOD LUCK !

Dictionary files & Passwords lists

KisMAC Resources

2011-06-14T19:00:00.000-04:00

KisMAC Resources, Wordlist, Dictionary files

Is there a KisMAC Tutorial?
Yes, a Video tutorial and a written one. Also a troubleshooting one and a debugger in progress. it's here: http://tinyurl.com/nxdcsd

What injection device should I use?
Definitely this one:
Best Wifi Card for KisMac about 20 X more powerful than Airport or Hawking

This card is a winner hands down!
Mentioning a Hawking or an Edimax as "competition" is a pure act of charity.

Otherwise, The list of “approved” hardware is here: http://trac.kismac-ng.org/wiki/HardwareList
I have tried the Edimax EW-7318 USg, Hawking HWUG1 & HWUG1A (about $40)
I am not really impressed by the sensitivity of the Hawking “as is”, nor by the Edimax.
After few tests and compared to the one mentioned above in "best card" I would not consider buying them again.

Nota Bene:
KisMAC will try every word (from the list provided) to attempt to crack the key, hence it may take a lot of time....if you have a slow machine, be really patient.
I have a not so bad machine, and I run about 170 words per second. You can leave a comment with your config and speed for me to compare.
Mine: MacBook Pro 2.5GHz Intel Core 2 Duo + 4GB DDR2 SDRAM : about 170 Word/sec

Can you find listing or maps of available networks?
-Yes you can, check the Wigle Webpage http://wigle.net

How to uninstall Drivers ? Plist?
Your best shot at uninstalling Plist is to use the free App called "App Cleaner"
You'll find the link, directions, etc, on the blog (left hand side)
If you have installed the drivers provided with a CD for a specific chipset, you will need:
The Admin Rights, the use of Terminal, and you'll need to unload the driver before removing it. Unloading the driver only works for one session: When you'll reboot, the driver will be loaded again.

How to select a single channel?
Take a look at "Step B", the picture shows "all channel selected"
you just have to click on "none" and the check the single channel wanted
you can also use directly the tab "Channel"

I am a Super Geek, is there something more powerful than KisMAC?
Aircrack-ng (Reserved for Advanced User)
How to install Aircrack on a Mac : http://easymactips.blogspot.com/2010/10/how-to-install-aircrack-on-mac.html
Wireshark is also a powerful one, but no so friendly for the beginner

Passwords Lists

One of the best is here:
http://easymactips.blogspot.com/2009/11/support-donate.html

Worst password list: Please, don't use them .....;-) they are often the first checked ....
http://aloah.free.fr/mactips/Wordlists.html
http://trac.kismac-ng.org/wiki/wordlists

List of Dictionary files or Wordlist / Wordlists
Sometimes called wordkey or word key (as per the results of your queries via Google Analytics
for WPA attack:
http://aloah.free.fr/mactips/Wordlists.html
http://trac.kismac-ng.org/wiki/wordlists
or you can compile your own.
I may suggest you to skip passwords of 1,2,3 & 4 characters, very few people use 3 ch passwords... A bruteforce attack will not take a long time on 3 ch....
WPA:
Minimum 8ch, so you can skip all pswd of less than 8 characters.

Note on dictionary files:
the words are tested "as is" and not in combination.
Example: the password is "I love Kismac"
If your dictionary contains the words "I" + "love" + "Kismac" it will NOT work, your dictionary must contain the exact "I love Kismac" as a word to successfully attempt to crack.

This is the only way to end with a successful attack is to use a dictionary containing the (exact) word(s).
Pure Brute Force attacks do NOT work with KisMAC (trying every single combination starting at "a" then "aa", "aaa", etc) You need to provide KisMAC with a dictionary file, format TXT, with an empty line at the end.

Passwords hints
A Dictionary attack uses a list of existing words. Often those lists are all lowercase or mixed, in English, and use "common" words
the more complex is your password, the greater is the chance that it will take a mind-boggling and un-human length of CPU time to try all the possible combination. (million of years)
If you use Kismac on a WPA attack, the only way to end with a successful attack is to use a dictionary containing the (exact) word.
Brute Force attacks do NOT work with KisMAC
As a possible target of WPA attack, "I", use stupid-strength passwords on full ASCII.
I do not use English words, or any common language, and I use lots of $igns and numbers.
So, how patient is the attacker?

Memotechnic tips
Instead of your "123456" dummy password you can use an HARD TO GUESS word and add numbers to it PLUS a second set of numbers while holding the "Shift" key
Example: the maiden name of your mom is Kismac, her Bday is 07 12 1962
you got a "07121962Kismac)&_!@_!(^@"
You just have a 20 Ch length password that you can easily retain.
As KisMac does not use pure Bruteforce to crack WPA, you are pretty safe with a password like this. finding such a word a in dictionary would be...surprising.
Be aware that you can find list of names, towns, zipcodes, etc . So, using "Smith" or "Boston" is not really foolproof

Even in the improbable case of a very, very tenacious "auditor", a 20 character full ASCII password (255 characters possibility) is up to 20^255 possibilities.
How big is 20^255?
well, that's: 1,351,461,283,755,590,000,000,000,000,000,000,000,000,000,000,000
it's already stupid strong. Unless you are the NSA, it's probably out of your reach:

Update on Oct 6 2009.
You may have heard of the Yahoo! password heist*.
*(Dec 2009: Forget the Yahoo! heist, a bunch of highly educated monkeys running a website have left their entire database of passwords in clear plain text. The result is 32,000,000 passwords and login stolen. More on that later....)

10,000 passwords and emails listed on the web, plus another 30,000 accounts of Gmail and Comcast compromised.
According to serious sources, the list was a possible snippet of 250,000 email and password for resale.
Email? not a big deal, huh? who cares? they just need to go to your online banking, and reset the password. They will get the message. You won't ....
I could not access the list on time, but the excellent Reusable Security Blog did
Here is his (Matt Weir) analysis about what you use

So on to the analysis:

Total Passwords: 9,845 - This number excludes all the e-mail addresses that had blank passwords
Average Password Length: 8.7 characters long
Percentage that contained an UPPERCASE letter: 7.2%
Percentage that contained a special, (aka !@#$), character: 5.2%
Percentage that contained a digit: 51.7%
Percentage that only contained lowercase letters: 43.3%
Percentage that only contained digits: 17.6%
Percentage the started with a digit, (aka '1password'): 25.0%
Percentage that ended with a digit, (aka 'password1'): 44.1%
Percentage that started with a special character: 0.5%
Percentage that ended with a special character: 2.2%
Percentage that started with an uppercase letter: 6.1%

Overall letter frequency analysis:

aeoi1r0ln2st9mc83765u4dbpghyvfkjAzEIOxRLwSNq.MTC_DB-UP*G@H/ZYF+VJK,\$&X!Q=W?'#")(%^][}< {`>

First character, letter frequency analysis:

a1mbc2sp0lterdjfgn3hi6k759vo48yAwMzBSCuqPLExJRTFDGNV*HOZYKI\W@/-+(.$U&?Q^[,#

Last character, letter frequency analysis:

aos01326e57849nrilydzmtuAhbO.gck*SxpfE@+LvjNRw_-I?/$q!ZX)YKH"UPMDCB#GF'&%}T,]\VJ(

As a repeat, the previous is from Matt Weir, from Reusable Security

So, it tells me that there are still a large number of people using password vulnerable to dictionary attacks.
Furthermore:
40% of users are using the same password for everything.
92.7% did not use an UPPERCASE
94.8% did not use a special character
and the best: Only contained digits: 17.6%
Average length 8.7 >> rounded to 9 Characters
For the 18% (of dummies) that only use digit:
Digit only = 10 possibility per Ch. 9Ch long = 10^9 = 1,000,000,000 possible combination
Realistic number of test before cracking: 50% (10^4.5)
Time to crack : 0,015 hour = Joke
For those 18%, Read this carefully:
"Neil O'Neil, a digital forensics investigator at secure payments firm The Logic Group, found that "123456" cropped up on the list 64 times. There were 18 uses of the second most popular password, "123456789",
Big surprise!!! Just like the ones mentioned in the 500 most used password. Can you guess what was the #3 and 4#? probably 1234567 and 12345678.
the 500 most used passwords is 4 or 5 yrs old, but it seems like it was brand new.
#1 to #10: 123456,password, 12345678,1234, pussy , 12345, dragon , qwerty , 696969, mustang

So, if I had to create a password list, guess what ..
First on the list would be 8 or 9 Ch long, all digit, then all lowercase, then adding a digit or 2 first, then adding a digit or 2 last.
That list It should cover about 80% of all password.
That would be a big list of 7,518,774,324,736 possibilities, but it would cover 80% of the general public. Not bad.
So, GET A REAL PASSWORD!

Because it's raining and I am bored:
Let 's assume a cluster of 10,000 Macbook Pro, dual core etc, working all together for you (distributed):
A Mac Book Pro, on intensive uses 263 Watt and generates 894 BTU/h output of heat
Cracking possibilities : up to 10,000,000 pswd /second/computer
If you do the math, you'll realize that cracking by brute force a 20 characters Full ASCII password will cost you up to 40 million dollars worth of electricity, create enough BTU to generate a heat wave the size of Texas and take you hundred of thousands of years.
You could hit the jackpot and find the pswd within minutes, but generally, it will take 50% of the maximum time possible to break a password
This is the reason why Keyloggers, Phishing and Clickjacking were invented. That's were, in my opinion, where the real danger is ...

Kismac for Windows
I am not aware of a Windows version of KisMAC (KisDOWS???) , nevertheless, you can Google NetStumbler, Aircrack, Airsnort, etc..
To the best of my knowledge, NetStumbler does not have cracking capabilities, nor the capabilities to uncloak hidden or deauthenticate networks.
If you want serious power, you'll need to forget about Windows (breaking news, huh?) and move on to Linux with Aircrack-ng
If you download a (working) version of KisMAC for Windows, please let me know.
If you download one, especialy from a torrent, I am suggesting you to be VERY careful and scan the file left, right up and down for viruses or malware. ( hint )

How to Install Aircrack on Mac

2011-01-12T13:00:00.019-05:00

How to Install Aircrack on Mac in 3 Easy Steps

Installing Aircrack-ng can be a little confusing if you don't understand the lingo.

Let me guide you trough those steps and you'll have Aircrack running natively in no time and almost no effort.

Why Use Aircrack?

Aircrack-ng is about up to 5 to 10 times faster than KisMAC when it comes to cracking WPA or WEP password.

KisMAC has an old Aircrack Engine and, honestly, it needs an update...

Aircrack-ng 1.1 churns about 1500 "WPA" keys per Second, or about 360 Passphrase/second when KisMAC is left behind at 160/Sec on a dual core.
Aircrack-ng was tested on a MacPro at 1,800 passphrases/sec or 6,100 keys/ sec

On WEP, the difference is extremely noticeable, especially on low IV's captures. Aircrack-ng can work as low as ~23,000 IV's on a 64 bit WEP, and this in matter of seconds. KisMAC will churn for 10 min before giving you the "unable to find the key"
Example here: 3 seconds with 22,566 IV's. Only 753 used.

For Airport users, once decrypted, you have to enter the key without semicolons and space.
Example: 70:61:62:6C:6F will be entered as 7061626C6F or 7061626c6f
If the key was entered as ASCII, Aircrack will also give you the ASCII value

If you are not familiar with the lingo, or wonder what does what, I would suggest reading the FAQ first.

There is multiple ways to install Aircrack-ng, this is one is the most straightforward way (that I am aware of. Suggestions are welcomed in the comment section)

Installing Aircrack-ng on OS X

Gather what you need: The Mise En Place

You'll need:

The DVD or CD install that came with your Mac
A Copy of Aircrack-ng 1.1 (just download, Do NOT unzip)
A Copy of Macports, (OPTIONAL for Install #2) you can download either directly from the website or choose between the following two:
MacPorts for OS X 10.6 (Snow Leopard)
MacPorts for OS X 10.5 (Leopard)
The Admin rights on your Mac, or at least the Admin Password.
In Most Cases you will a Network Adapter to either Re-Inject packets, Flood or Dehauthenticate. You can do without, but you'll need a lot of patience. I only recommend one specific one. If you already have one, well..too bad. if you are going to buy one, you better use the one recommended: Better Value and beat the shit out of the competition

The Installation

Put the Snow Leopard DVD in, and select Optional Installs

Select "Install Xcode " and continue.

When Xcode is fully installed, Remove the DVD and continue with MacPorts

Click on the previously downloaded MacPorts dmg file and let it mount

Select "Standard Install" if asked, and click to continue.

It may take more than 5 minutes to install, don't panic!

While waiting, read the FAQ!

when done, go to the next step

Open Terminal

Go to the folder where Aircrack-ng was downloaded, i.e "Downloads"
Note: Avoid the use of folder names with spaces or you'll make it difficult with Terminal

cd Downloads

sudo port install aircrack-ng

Enter your password as requested, then hit Enter, and let it run....

Voila!

FAQ & RFAQ

Why use Aircrack and not KisMAC alone?
Aircrack-ng can churn 10 x faster than KisMAC alone for Key Recovery.

Can I dump KisMAC now?

No! Aircrack alone can not re-inject or Monitor Wifi. "Mind you, airodump-ng and aireplay-ng are linux only and will not work under OSX native, so for reinjecting and sniffing you will have to use other means." And that's from Aircrack-ng itself. Hence, I'll advise to keep KisMAC.

I cannot find a .cap file

.cap .pcap or dumplog are the same thing. KisMAC exports the file without an extension and Aircrack does not care. KisMAC let you choose the name of the file under Preferences >> Drivers

The format by default is ~/Dumplog year month day hours minutes

Select your options based on your preferences or make your own.

Can I merge Dumplogs / PCAP / CAP files?
Yes, You may use Wireshark ➟ File ➟ Merge

Can I convert Dumplogs / PCAP / CAP files?
Yes, You may use ivstools, provided with Aircrack.
ivstools --convert

Can I Merge IVS files?
Yes, use --merge with ivstools: ivstools --merge

Can I Open Multiple Dumplogs / PCAP / CAP files?
Yes, just use an asterisk (star) (*) with Aircrack
Example: Aircrack-ng Dump*

I can't has a krack! I can has a pazwort?

The subject was previously discussed, here again: sudo make user -now RTFM && STFW. or box the Mac and ship to me: I'll deal with it.

Aircrack-ng options

Just type Aircrack-ng or Aircrack-ng --help You'll have the whole list

How do I start?

Just start by a simple: aircrack-ng dumplog (dumplog being the name of the capture file)
Or, if you have opted for very long dumplogs names, with spaces, just drag the file into the Terminal window, and add "Aircrack-ng" before the path. please don't type the quotes....

You'll see a list of APs, enter the network number, ... after that it's pretty straightforward....

Aircrack-ng Command Lines

usage: aircrack-ng [options] <.cap / .ivs file(s)>

Assuming that:
dumplog being the name of your dump file
dicfile.txt being the name of your dictionary files or wordlists , with path if necessary

WEP
aircrack-ng dumplog
Select the number of the AP, then press Enter

WPA
aircrack-ng dumplog -w dicfile.txt
Select the number of the AP, then press Enter

Aircrack-ng Opening Multiple DumpLogs, PCAP, CAP files, on a single network, with automatic key recovery

Aircrack-ng -e dump*

Please note that "dumplog" & "Dumplog" are different. -for aircrack-.

It's easier to "regroup" your files in one directory than typing path long as your arm.
Also, don't hesitate to rename the dumplogs / cap files: "dumplog" is easier to type than "DumpLog-11-02-17-17/40.pcap"
aircrack-ng ~/Desktop/dumplog -w ~/Desktop/Dicfile.txt

If you have located your dumplog in a far far away folder, or have used spaces in your folder name, read again the previous paragraph.
If you decide against that advice, you'll need to include quotes in the file name, or use a backslash BEFORE the space.
Example with the folder Air Crack, the command line would be the following:
~/Desktop/Air\ Crack/Dicfile.txt

Examples:
Aircrack-ng Opening Multiple DumpLogs, PCAP, CAP files, on a single network, with automatic key recovery

Aircrack-ng -e dump*

To Pause Aircrack-ng
Hold your horses! There is no real pause when running a Wordlist on Aircrack-ng
One solution is to stop Aircrack, note carefully the name of the last key checked, and edit your Wordlist few keys before, save under a temp name and restart when ready.
To Stop, just do a CTRL-Z.

To Quit Aircrack-ng CTRL-C

I have multiple Macs, can I speed up the key recovery?
yes, copy the Dumplog and the Dictionary(ies) and use as many as you want. It's called a distributed attack. I would split the Dic in two and reverse one (start from bottom up) or use multiple dictionaries. - Your call.

What about Precomputed Tables?

Yes but no,
The precomputed PMK (Pairwise Master Key) has pros and cons.
The SSID is used as "salt" in the hash, hence you'll have to precompute a different one for each SSID. If you spend your days assessing networks, that, maybe, could be useful with SSIDs such as "Linksys" etc ... but you'll spend a lot of time computing. It is only worth it if you know that you are going to reuse the precomputed table over and over again.
The most used SSIDs are the following.
After many years, Dlink has started assigning different SSIDs to their router (Dlink.1234)
Nevertheless, they are still using very short default password. Thank you D-Link.

no ssid	2110760	6.571%
linksys	2065356	6.429%
NETGEAR	678943	2.113%
default	595090	1.852%
Belkin54g	276667	0.861%
hpsetup	232518	0.723%
Wireless	225838	0.703%
no_ssid	211360	0.658%
DLINK	199668	0.621%
WLAN	120117	0.373%
home	107110	0.333%

Source: WiGLE

Aircrack-ng / KisMAC Speed Test
Test files of 100,000 lines were used:
One with 8 numerical digit, from 00000000 to 99999999
One with complex passphrase of 50 printable characters: !@#$%....ABC....99999
One with 50,000 less than 8 ch and 50,000 more than 8 ch long

Tests were done on a Intel Dual Core 2.5GHz, 4GB RAM

Aircrack Speed:
100,000 Passphrases in 04' 42", or 354.61 Pswd/sec
~1450 K/s

Is Aircrack-ng slowed down by complex passphrase?
100,000 Passphrases in 04' 43", or 353.3 Pswd/sec
Result: difference is negligible: 1 sec overall

Is Aircrack-ng testing less than 8ch passwords?
No, the file containing 50% less than 8ch long passwords was done in 2'12

KisMAC Speed:
100,000 Passphrases in 10' 18", or 161.8 Pswd/sec
2.2 times slower

Is KisMAC testing less than 8ch passwords?
No, the file containing 50% less than 8ch long passwords was done in 4' 27"

Is KisMAC slowed down by complex passphrase?
No, here again, results are almost the same.

Common Aircrack-ng options:

      -a : force attack mode (1/WEP, 2/WPA-PSK)
      -e : target selection: network identifier
      -b : target selection: access point's MAC
      -p : # of CPU to use (default: all CPUs)
      -q         : enable quiet mode (no status output)
      -C : merge the given APs to a virtual one
      -l : write key to file

Static WEP cracking options:

      -c         : search alpha-numeric characters only
      -t         : search binary coded decimal chr only
      -h         : search the numeric key for Fritz!BOX
      -d : use masking of the key (A1:XX:CF:YY)
      -m : MAC address to filter usable packets
      -n : WEP key length : 64/128/152/256/512
      -i : WEP key index (1 to 4), default: any
      -f : bruteforce fudge factor, default: 2
      -k : disable one attack method (1 to 17)
      -x or -x0 : disable bruteforce for last keybytes
      -x1        : last keybyte bruteforcing (default)
      -x2        : enable last 2 keybytes bruteforcing
      -X         : disable bruteforce   multithreading
      -y         : experimental single bruteforce mode
      -K         : use only old KoreK attacks (pre-PTW)
      -s         : show the key in ASCII while cracking
      -M    : specify maximum number of IVs to use
      -D         : WEP decloak, skips broken keystreams
      -P    : PTW debug: 1: disable Klein, 2: PTW
      -1         : run only 1 try to crack key with PTW

WEP and WPA-PSK cracking options:
-w : path to wordlist(s) filename(s)

Most Used Passwords Of All Times

2010-12-17T10:30:00.014-05:00

Most Used Passwords Of All Times

This list was compiled out of multiple passwords leaks, hacks and Social Engineering traps.
It's made for you to realize the importance of a good & strong password.
Please read the Do's and Don't, it may save you from misery.

The following is compilation of real passwords lists composed of: (Name, Count)

Rockyou List       32,603,389      BlackKnights         5,088,332
Hash Hack    546,840      PhPbb List             184,389
Gawker   Hack            82,600 (And counting .....~500,000 mini expected)
Tuscl                           38,820     MySpace Phished    37,144
Hotmail Hack            21,652      Faithwriters hack        8,347
Angelfire                      8,087      Facebook Phished       6,540
Gawker   Release          2,651   (c) Gnosis
Common pswd used     2,445       Worst 500                 500
Most Used 500                500 (c) Mark Burnett
Twitter Banned                370       Gawker Most Used 250 (out of 400,000) (c) Duo Security
Facebook Stolen    ~150

Total Raw ~ 38,000,000 Passwords

Total Duplicates Removed
Sorted by Occurrences: 19,584,249 Unique Passwords

Fun Facts:
- No Passwords in the top 1000 has a Sign! (!@#$%......etc)
- In the Raw List the following strings were found # times: "fuck" 74,326 : "love" 13,947 : "123" 1,265,285: "1234" 691,434 : "monkey" 49,296, etc etc ...
- It would not take long to create variations, adding millions to a crack list...
- Most of the top 2000 are derivatives of "words"
The first use of a capitalized letter is at position #800, in "PASSWORD" (You can't see me, but I am crying...)

Twitter @GinaTrapani about the Gawker hack

- If you believe you are safe using "m0nk3y" instead of "monkey", you'll be in for a surprise. It would take an average of 15 seconds to crack it. Ditto for m0ndays, p@ssw0rd, etc ...
- It would take me a maximum of 6.5 minutes to run the first 500,000 passwords on Aircrack-ng, 3.7 minutes on JTR and 50 seconds on Aircrack-ng CUDA
- Today, you can rent on Amazon EC2 for $2.10 an hour enough computing power to run ~50,000 pwsd/sec, or 180 million pwsd per hour.
- A medium sized botnet can churn 36 billion keys per hour. Free of charge.

You have been warned! Choose wisely ....

Top 1000 Passwords of All Times

Top 2000 Passwords of All Times

All Times, That is until the next big one..

Top 10
Rank   Count     Password

   1:    290834    123456
   2:      79096    12345
   3:      76822    123456789
   4:      59494    password
   5:      49977    iloveyou
   6:      33314    princess
   7:      21748    1234567
   8:    20902    rockyou
   9:      20575    12345678
10:     16662     abc123


Do's and Don'ts

Don't use a Password! Use a Passphrase!
When asked to use a password, you have a tendency to use a "word". A single one!
Instead, use a sentence or a phrase: It's easier to remember, easier to add Caps and spaces, and will increase the length of it by a factor of 2 or 3.
Do Use Your Keyboard. The Entire Keyboard!
Just using numbers is the worst, adding letters is better, adding caps and lower caps is good. Now add signs and you'll have a very good Passphrase. If you to give me a hard time at cracking your ~~password~~ Passphrase, use a MAEP   : "Mnemonically Algorithmic Enhanced Passphrase"

A Mnemonically Algo What?
- Yes, I know, just the name....
Let's rephrase that as a "Easy to remember, complex Passphrase that changes..."

- Let's pretend that your old password is "ilovebeef" it's weak, and dead easy to crack.
"ilovebeef" is all lower cap, made of easy words.
Change that to: "I Love Beef" You've added caps and spaces, and increased the length by 2ch without any pain remembering it. As a hacker, I have now to run a much, much longer dictionary. Not good for me, but good for you!
Still, "I Love Beef" is still "guessable" (but not found in the 38M passwords of the list)
Now, you know that "I" is in fact "you"
"You" have probably plenty of personal numbers known only by you. i.e the last 4 digit of a number.
So, take that number, i.e "7845" and press the Shift Key of your keyboard. you'll get "&*$%"
Fyi, hack speaking, "&*$% Love Beef" start to be a tough one to crack.
Now, imagine that you go "7845&*$% Love Beef" you still knows what it means, it's easy to remember, and generates 18 characters long.
The Algo Part
On the Top of the passphrase, you can add a prefix or suffix based on the website, It's a well know trick, but it adds few characters and increases by few fold the difficulty.
Example, for Gmail, you can add a "+gmail" or ~mail to your passphrase. It allows you to change the passphrase each time for each website.
So, coming from "ilovebeef" you can reach, without any remembering issue a "7845&*$% Love Beef~mail" or "7845&*$% Love Beef~work"
Such password in practically uncrackable, and even a very very patient hacker will never have the time to brute force such.
You don't have to use a 25 ch, 15 is long enough:   Consider that 15ch with the entire Keyboard (printable characters) generates 15^127 possibilities, or in number: 1,253,437,565,941,480,000,000,000,000,000,000,000
Don't Trust Me!
I mean, don't trust yourself too much. Or don't trust them too much. Just in case of a smart phishing website, or a Gawker type stupid security, even the most secure passwords could be compromised. One of the best solution is to use "disposable email addresses"
Keep a good one for important stuff, and use disposables for the rest. Never link or use your "good" email address for things such as commenting on a website, Facebook, Twitter or your multiple groupon, yelp, linkedin, Skype, MSN, etc.
If a disposable email address is compromised, just kill it and replace with another one.
I can't remember them!
Ok Then, Use the MasterPassword on Firefox (free), or even better, use "1Password" (fee)
You also can generate your own true random Passphrase with GRC.com
(up to 63 True Random Printable ASCII). Virtually uncrackable as long as you stay over 12ch in length.

Want to know more? ☟

Top 1,000 Passwords of All Times

2010-12-16T12:42:00.001-05:00

Top 1,000 passwords of all times

Rank, Occurrence, Password
If you copy, or re-post, please use credits or link it.
Thanks

   1: 290834 123456
   2: 79096 12345
   3: 76822 123456789
   4: 59494 password
   5: 49977 iloveyou
   6: 33314 princess
   7: 21748 1234567
   8: 20902 rockyou
   9: 20575 12345678
10: 16662 abc123
11: 16247 nicole
12: 15327 daniel
13: 15168 babygirl
14: 14760 monkey
15: 14337 lovely
16: 14119 jessica
17: 14004 654321
18: 13991 michael
19: 13502 ashley
20: 13472 qwerty
21: 13297 111111
22: 13139 iloveu
23: 13039 000000
24: 12732 michelle
25: 11783 tigger
26: 11497 sunshine
27: 11303 chocolate
28: 11118 password1
29: 10851 soccer
30: 10763 anthony
31: 10742 friends
32: 10567 butterfly
33: 10565 purple
34: 10517 angel
35: 10176 jordan
36: 9770 liverpool
37: 9722 justin
38: 9712 loveme
39: 9623 fuckyou
40: 9538 123123
41: 9477 football
42: 9328 secret
43: 9171 andrea
44: 9064 carlos
45: 8987 jennifer
46: 8970 joshua
47: 8771 bubbles
48: 8682 1234567890
49: 8676 superman
50: 8645 hannah
51: 8552 amanda
52: 8503 loveyou
53: 8468 pretty
54: 8411 basketball
55: 8370 andrew
56: 8319 angels
57: 8290 tweety
58: 8284 flower
59: 8029 playboy
60: 7918 hello
61: 7878 elizabeth
62: 7804 hottie
63: 7774 tinkerbell
64: 7747 charlie
65: 7730 samantha
66: 7664 barbie
67: 7658 chelsea
68: 7571 lovers
69: 7539 teamo
70: 7529 jasmine
71: 7510 brandon
72: 7435 666666
73: 7351 shadow
74: 7313 melissa
75: 7249 eminem
76: 7230 matthew
77: 7215 robert
78: 7160 danielle
79: 7125 forever
80: 6985 family
81: 6781 jonathan
82: 6666 987654321
83: 6663 computer
84: 6658 whatever
85: 6618 dragon
86: 6575 vanessa
87: 6573 cookie
88: 6552 naruto
89: 6513 summer
90: 6428 sweety
91: 6396 spongebob
92: 6328 joseph
93: 6283 junior
94: 6221 softball
95: 6142 taylor
96: 6123 yellow
97: 6093 lauren
98: 6085 daniela
99: 6078 mickey
100: 6032 princesa
101: 5988 alexandra
102: 5885 alexis
103: 5868 jesus
104: 5859 estrella
105: 5850 miguel
106: 5841 william
107: 5803 thomas
108: 5761 beautiful
109: 5732 mylove
110: 5725 angela
111: 5677 patrick
112: 5674 poohbear
113: 5594 iloveme
114: 5505 sakura
115: 5491 adrian
116: 5443 destiny
117: 5443 alexander
118: 5408 christian
119: 5391 121212
120: 5348 sayang
121: 5339 america
122: 5322 dancer
123: 5308 monica
124: 5245 richard
125: 5239 112233
126: 5189 princess1
127: 5182 555555
128: 5174 diamond
129: 5136 carolina
130: 5115 steven
131: 5106 rangers
132: 5091 louise
133: 5070 orange
134: 5062 789456
135: 5056 999999
136: 5015 snoopy
137: 5012 11111
138: 5009 nathan
139: 5008 shorty
140: 4952 gabriel
141: 4943 hunter
142: 4905 cherry
143: 4845 killer
144: 4840 sandra
145: 4817 alejandro
146: 4815 buster
147: 4757 george
148: 4738 brittany
149: 4728 alejandra
150: 4710 patricia
151: 4670 rachel
152: 4635 tequiero
153: 4608 cheese
154: 4605 7777777
155: 4588 159753
156: 4582 arsenal
157: 4577 dolphin
158: 4561 antonio
159: 4555 ginger
160: 4554 heather
161: 4548 david
162: 4528 stephanie
163: 4512 peanut
164: 4503 blink182
165: 4497 sweetie
166: 4494 222222
167: 4482 987654
168: 4481 beauty
169: 4472 pokemon
170: 4468 victoria
171: 4466 honey
172: 4462 00000
173: 4459 fernando
174: 4452 maggie
175: 4436 chicken
176: 4433 corazon
177: 4431 pepper
178: 4430 rainbow
179: 4426 cristina
180: 4411 kisses
181: 4405 manuel
182: 4390 myspace
183: 4346 rebelde
184: 4328 angel1
185: 4303 ricardo
186: 4297 babygurl
187: 4277 heaven
188: 4264 baseball
189: 4260 55555
190: 4257 martin
191: 4252 greenday
192: 4243 november
193: 4168 alyssa
194: 4151 madison
195: 4145 123321
196: 4139 mother
197: 4124 123abc
198: 4099 batman
199: 4097 mahalkita
200: 4072 september
201: 4071 december
202: 4068 morgan
203: 4035 mariposa
204: 4024 maria
205: 4013 gabriela
206: 3999 iloveyou2
207: 3997 bailey
208: 3966 pamela
209: 3966 jeremy
210: 3942 gemini
211: 3940 shannon
212: 3940 kimberly
213: 3928 pictures
214: 3925 asshole
215: 3915 sophie
216: 3911 jessie
217: 3890 hellokitty
218: 3880 claudia
219: 3831 angelica
220: 3825 babygirl1
221: 3809 austin
222: 3793 horses
223: 3784 victor
224: 3780 mahalko
225: 3775 tiffany
226: 3768 mariana
227: 3763 eduardo
228: 3751 courtney
229: 3751 andres
230: 3749 booboo
231: 3736 harley
232: 3734 kissme
233: 3706 ronaldo
234: 3703 iloveyou1
235: 3695 october
236: 3694 precious
237: 3686 inuyasha
238: 3679 peaches
239: 3672 veronica
240: 3663 chris
241: 3653 888888
242: 3627 adriana
243: 3604 james
244: 3604 cutie
245: 3595 banana
246: 3593 prince
247: 3568 friend
248: 3567 jesus1
249: 3546 crystal
250: 3531 celtic
251: 3530 oliver
252: 3527 zxcvbnm
253: 3527 edward
254: 3524 diana
255: 3521 samsung
256: 3511 freedom
257: 3505 angelo
258: 3497 kenneth
259: 3492 master
260: 3488 scooby
261: 3475 sebastian
262: 3472 carmen
263: 3469 456789
264: 3468 rebecca
265: 3463 jackie
266: 3443 spiderman
267: 3442 johnny
268: 3441 karina
269: 3440 christopher
270: 3430 hotmail
271: 3402 school
272: 3401 0123456789
273: 3373 barcelona
274: 3371 august
275: 3367 orlando
276: 3346 samuel
277: 3340 cameron
278: 3335 slipknot
279: 3318 cutiepie
280: 3309 monkey1
281: 3301 bonita
282: 3295 50cent
283: 3291 kevin
284: 3291 bitch
285: 3290 casper
286: 3282 maganda
287: 3280 babyboy
288: 3270 brenda
289: 3267 kitten
290: 3267 adidas
291: 3257 karen
292: 3251 mustang
293: 3220 isabel
294: 3216 natalie
295: 3184 cuteako
296: 3164 javier
297: 3164 789456123
298: 3148 sarah
299: 3145 123654
300: 3142 bowwow
301: 3117 777777
302: 3111 portugal
303: 3108 marvin
304: 3105 laura
305: 3085 tigers
306: 3085 denise
307: 3074 jasper
308: 3071 volleyball
309: 3067 rockstar
310: 3065 january
311: 3055 nicholas
312: 3055 fuckoff
313: 3055 alicia
314: 3053 flowers
315: 3050 cristian
316: 3050 bianca
317: 3049 tintin
318: 3046 chester
319: 3040 chrisbrown
320: 3018 smokey
321: 3013 101010
322: 3012 silver
323: 3008 internet
324: 2998 sweet
325: 2983 dennis
326: 2981 strawberry
327: 2980 garfield
328: 2968 cassie
329: 2966 panget
330: 2962 francis
331: 2958 benfica
332: 2951 696969
333: 2942 love123
334: 2921 asdfgh
335: 2909 lollipop
336: 2895 olivia
337: 2885 cancer
338: 2882 camila
339: 2878 qwertyuiop
340: 2872 superstar
341: 2872 harrypotter
342: 2861 charles
343: 2859 ihateyou
344: 2857 midnight
345: 2850 monique
346: 2848 vincent
347: 2845 christine
348: 2832 apples
349: 2819 scorpio
350: 2812 jordan23
351: 2807 lorena
352: 2799 mercedes
353: 2795 katherine
354: 2794 andreea
355: 2793 charmed
356: 2787 icecream
357: 2787 abigail
358: 2785 rafael
359: 2781 mexico
360: 2763 brianna
361: 2760 nirvana
362: 2753 pookie
363: 2753 aaliyah
364: 2748 lovelove
365: 2746 johncena
366: 2746 fucker
367: 2741 abcdef
368: 2735 131313
369: 2732 benjamin
370: 2723 gangsta
371: 2721 brooke
372: 2708 333333
373: 2702 hiphop
374: 2692 aaaaaa
375: 2686 welcome
376: 2686 mybaby
377: 2685 sergio
378: 2684 metallica
379: 2672 travis
380: 2670 julian
381: 2664 myspace1
382: 2663 sabrina
383: 2659 babyblue
384: 2657 michael1
385: 2656 jeffrey
386: 2655 love
387: 2651 stephen
388: 2646 dakota
389: 2636 catherine
390: 2632 badboy
391: 2626 fernanda
392: 2615 westlife
393: 2609 blondie
394: 2608 sasuke
395: 2606 jackson
396: 2603 smiley
397: 2595 simple
398: 2594 melanie
399: 2587 steaua
400: 2586 roberto
401: 2584 dolphins
402: 2580 fluffy
403: 2572 teresa
404: 2554 piglet
405: 2548 ronald
406: 2543 asdfghjkl
407: 2540 slideshow
408: 2538 minnie
409: 2536 newyork
410: 2525 jason
411: 2510 raymond
412: 2502 santiago
413: 2499 88888888
414: 2498 muffin
415: 2496 jayson
416: 2492 5201314
417: 2491 jerome
418: 2488 gandako
419: 2487 gatita
420: 2475 246810
421: 2472 babyko
422: 2467 kitty
423: 2460 sweetheart
424: 2457 alberto
425: 2455 chivas
426: 2451 ladybug
427: 2450 popcorn
428: 2442 cookies
429: 2440 valeria
430: 2440 leslie
431: 2440 jenny
432: 2432 nicole1
433: 2432 12345678910
434: 2420 leonardo
435: 2419 232323
436: 2418 jayjay
437: 2417 dexter
438: 2416 liliana
439: 2411 amores
440: 2410 sexygirl
441: 2409 rockon
442: 2407 christ
443: 2404 babydoll
444: 2403 marcus
445: 2402 anthony1
446: 2396 bitch1
447: 2382 lover
448: 2381 miamor
449: 2380 fatima
450: 2379 chris1
451: 2373 single
452: 2370 eeyore
453: 2368 lalala
454: 2364 scooter
455: 2362 252525
456: 2353 natasha
457: 2351 skittles
458: 2341 brooklyn
459: 2337 159357
460: 2335 colombia
461: 2330 happy
462: 2325 winnie
463: 2325 teddybear
464: 2319 manutd
465: 2316 123456a
466: 2312 britney
467: 2311 katrina
468: 2306 christina
469: 2300 cocacola
470: 2294 pasaway
471: 2292 albert
472: 2289 mahal
473: 2288 grace
474: 2287 london
475: 2287 linda
476: 2281 tatiana
477: 2273 lakers
478: 2273 0123456
479: 2270 cantik
480: 2269 marie
481: 2265 teiubesc
482: 2262 147258369
483: 2259 charlotte
484: 2250 natalia
485: 2242 francisco
486: 2226 smile
487: 2224 amorcito
488: 2218 paola
489: 2214 angelito
490: 2211 hahaha
491: 2206 manchester
492: 2206 elephant
493: 2196 shelby
494: 2196 mommy1
495: 2193 147258
496: 2192 kelsey
497: 2192 amigos
498: 2189 genesis
499: 2185 turtle
500: 2184 xavier
501: 2184 snickers
502: 2176 stupid
503: 2176 marlon
504: 2176 linkinpark
505: 2174 claire
506: 2170 marina
507: 2168 147852
508: 2153 garcia
509: 2151 fuckyou1
510: 2150 diego
511: 2149 brandy
512: 2145 letmein
513: 2140 hockey
514: 2135 bonnie
515: 2135 444444
516: 2131 sharon
517: 2129 spider
518: 2125 iverson
519: 2119 andrei
520: 2117 rabbit
521: 2115 frankie
522: 2114 justine
523: 2112 disney
524: 2111 pimpin
525: 2106 54321
526: 2103 fashion
527: 2101 soccer1
528: 2094 red123
529: 2090 bestfriend
530: 2089 england
531: 2084 hermosa
532: 2081 qazwsx
533: 2076 bandit
534: 2076 456123
535: 2068 danny
536: 2068 allison
537: 2066 emily
538: 2065 lucky1
539: 2062 dallas
540: 2062 102030
541: 2061 miranda
542: 2058 sporting
543: 2057 camille
544: 2055 wilson
545: 2055 hearts
546: 2052 potter
547: 2050 pumpkin
548: 2046 guitar
549: 2044 katie
550: 2043 iloveu2
551: 2042 number1
552: 2040 phoenix
553: 2038 monster
554: 2038 212121
555: 2036 truelove
556: 2035 savannah
557: 2035 jayden
558: 2031 hottie1
559: 2030 player
560: 2024 people
561: 2020 ganda
562: 2019 timothy
563: 2018 scotland
564: 2018 nelson
565: 2017 jasmin
566: 2016 onelove
567: 2008 shakira
568: 2008 ilovehim
569: 2004 estrellita
570: 2002 bubble
571: 1999 sparky
572: 1995 smiles
573: 1993 brandon1
574: 1992 barney
575: 1986 sweets
576: 1981 evelyn
577: 1979 florida
578: 1978 parola
579: 1977 nikki
580: 1976 familia
581: 1975 motorola
582: 1974 love12
583: 1969 omarion
584: 1968 monkeys
585: 1968 canada
586: 1963 elijah
587: 1962 joanna
588: 1961 loverboy
589: 1959 thunder
590: 1959 emmanuel
591: 1957 ronnie
592: 1955 999999999
593: 1954 mamita
594: 1948 broken
595: 1945 rodrigo
596: 1943 lucky
597: 1940 maryjane
598: 1939 california
599: 1938 westside
600: 1934 yankees
601: 1929 mauricio
602: 1927 jackass
603: 1925 jamaica
604: 1922 justin1
605: 1922 amigas
606: 1916 shopping
607: 1916 preciosa
608: 1900 matrix
609: 1899 tennis
610: 1899 mariah
611: 1899 flores
612: 1893 isabella
613: 1892 trinity
614: 1888 bradley
615: 1887 sunflower
616: 1887 kathleen
617: 1886 jorge
618: 1884 hector
619: 1884 cupcake
620: 1880 elaine
621: 1878 martinez
622: 1877 robbie
623: 1876 gracie
624: 1875 hello1
625: 1874 valentina
626: 1874 friendster
627: 1874 connor
628: 1874 cheche
629: 1868 sammy
630: 1868 melody
631: 1865 darling
632: 1864 jamie
633: 1863 candy
634: 1860 abcdefg
635: 1859 santos
636: 1858 joanne
637: 1855 loser
638: 1854 fuckyou2
639: 1848 dominic
640: 1847 pebbles
641: 1841 swimming
642: 1841 sunshine1
643: 1837 millie
644: 1837 loving
645: 1835 compaq
646: 1831 gangster
647: 1831 blessed
648: 1826 taurus
649: 1826 gloria
650: 1824 aaron
651: 1823 tyler
652: 1814 kitkat
653: 1813 darkangel
654: 1809 megan
655: 1809 dreams
656: 1806 sweetpea
657: 1806 jessica1
658: 1806 ferrari
659: 1805 cynthia
660: 1805 cheyenne
661: 1804 bettyboop
662: 1803 snowball
663: 1801 dustin
664: 1799 a123456
665: 1798 purple1
666: 1798 iubire
667: 1797 starwars
668: 1796 violet
669: 1796 darren
670: 1788 kelly
671: 1788 bestfriends
672: 1783 inlove
673: 1782 biteme
674: 1782 batista
675: 1780 sophia
676: 1778 chacha
677: 1777 karla
678: 1776 sydney
679: 1773 marian
680: 1771 sexyme
681: 1771 010203
682: 1770 gerald
683: 1769 pogiako
684: 1769 jordan1
685: 1767 daddy1
686: 1766 zachary
687: 1763 daddysgirl
688: 1760 carebear
689: 1760 billabong
690: 1758 oscar
691: 1758 froggy
692: 1754 pinky
693: 1752 raiders
694: 1751 erika
695: 1749 skater
696: 1744 nenita
697: 1742 tigger1
698: 1741 gatito
699: 1741 charlie1
700: 1738 ashley1
701: 1731 buttercup
702: 1730 lokita
703: 1729 maldita
704: 1725 nichole
705: 1724 bambam
706: 1721 nothing
707: 1720 amber
708: 1718 glitter
709: 1718 apple
710: 1717 bella
711: 1710 123789
712: 1709 sister
713: 1704 zacefron
714: 1702 tokiohotel
715: 1700 money
716: 1700 lindsey
717: 1699 loveya
718: 1696 lovebug
719: 1696 bubblegum
720: 1695 darkness
721: 1694 dreamer
722: 1693 cecilia
723: 1692 google
724: 1691 marissa
725: 1690 lollypop
726: 1689 cooper
727: 1687 nicolas
728: 1684 lindsay
729: 1682 green
730: 1677 passion
731: 1675 ariana
732: 1674 kristine
733: 1674 fuckme
734: 1673 puppies
735: 1672 chubby
736: 1667 raquel
737: 1667 lonely
738: 1667 anderson
739: 1662 sammie
740: 1662 butter
741: 1661 willow
742: 1657 mario
743: 1657 caroline
744: 1655 sexybitch
745: 1653 mememe
746: 1652 susana
747: 1652 roxana
748: 1649 kristen
749: 1645 carter
750: 1643 hotstuff
751: 1643 baller
752: 1641 stacey
753: 1639 scorpion
754: 1638 sierra
755: 1637 miller
756: 1636 babylove
757: 1634 angelina
758: 1631 sweet16
759: 1631 012345
760: 1630 rocker
761: 1628 playgirl
762: 1620 marcos
763: 1620 gustavo
764: 1620 bhebhe
765: 1620 123qwe
766: 1619 kayla
767: 1619 chance
768: 1618 eagles
769: 1616 james1
770: 1615 football1
771: 1613 loveme1
772: 1611 milagros
773: 1609 stella
774: 1601 rocky
775: 1601 catdog
776: 1599 beyonce
777: 1598 lovely1
778: 1598 lilmama
779: 1598 daddy
780: 1597 armando
781: 1594 margarita
782: 1591 151515
783: 1590 lolita
784: 1589 202020
785: 1588 loves
786: 1586 gerard
787: 1586 freddy
788: 1584 undertaker
789: 1582 williams
790: 1582 amistad
791: 1581 qwerty1
792: 1577 caitlin
793: 1577 bryan
794: 1576 delfin
795: 1575 capricorn
796: 1572 dance
797: 1569 password2
798: 1568 martha
799: 1567 lizzie
800: 1567 PASSWORD
801: 1566 cheerleader
802: 1563 11111111
803: 1562 georgia
804: 1560 zxcvbn
805: 1560 matthew1
806: 1558 booger
807: 1556 enrique
808: 1556 141414
809: 1555 dancing
810: 1555 badgirl
811: 1553 andrew1
812: 1551 vampire
813: 1551 skyline
814: 1551 cuteme
815: 1551 chiquita
816: 1551 amelia
817: 1549 scoobydoo
818: 1549 angeles
819: 1548 janine
820: 1546 yamaha
821: 1546 tamara
822: 1546 ireland
823: 1546 carlitos
824: 1545 money1
825: 1544 sheila
826: 1544 kittycat
827: 1544 justme
828: 1544 hotdog
829: 1541 tristan
830: 1536 legolas
831: 1536 harvey
832: 1530 maddie
833: 1530 israel
834: 1526 michelle1
835: 1525 angie
836: 1523 jesuschrist
837: 1523 cinderella
838: 1520 lester
839: 1515 xxxxxx
840: 1514 ashton
841: 1513 thebest
842: 1512 ilovejesus
843: 1511 tazmania
844: 1511 remember
845: 1511 buddy1
846: 1509 paloma
847: 1509 lucky7
848: 1508 tekiero
849: 1508 deedee
850: 1507 princesita
851: 1507 peewee
852: 1506 jesucristo
853: 1505 patches
854: 1503 regina
855: 1503 miriam
856: 1503 cowboys
857: 1503 april
858: 1499 rosita
859: 1499 janice
860: 1498 felipe
861: 1497 myself
862: 1496 lipgloss
863: 1496 happy1
864: 1495 jazmin
865: 1495 chichi
866: 1492 pangit
867: 1490 genius
868: 1489 walter
869: 1489 mierda
870: 1488 arturo
871: 1488 741852963
872: 1486 tinker
873: 1486 awesome
874: 1485 hernandez
875: 1482 melvin
876: 1482 celeste
877: 1481 silvia
878: 1480 pussycat
879: 1473 molly
880: 1473 gorgeous
881: 1473 david1
882: 1471 animal
883: 1469 penguin
884: 1469 mylife
885: 1468 honeyko
886: 1462 loveu
887: 1462 babyboo
888: 1461 boomer
889: 1458 simpsons
890: 1456 lupita
891: 1453 johnson
892: 1452 panthers
893: 1451 hollywood
894: 1451 alfredo
895: 1449 musica
896: 1445 ilovegod
897: 1445 hawaii
898: 1443 sparkle
899: 1443 kristina
900: 1442 winter
901: 1440 hardcore
902: 1439 valerie
903: 1439 crazy
904: 1438 spencer
905: 1438 sexymama
906: 1438 scarface
907: 1437 098765
908: 1437 00000000
909: 1436 hailey
910: 1435 trixie
911: 1431 hayden
912: 1428 micheal
913: 1428 242424
914: 1427 wesley
915: 1426 0987654321
916: 1425 daisy
917: 1424 nikita
918: 1424 marisol
919: 1421 murphy
920: 1420 pineapple
921: 1420 jeremiah
922: 1419 isaiah
923: 1419 christmas
924: 1417 cesar
925: 1416 mhine
926: 1416 lolipop
927: 1415 chloe
928: 1414 butterfly1
929: 1413 lawrence
930: 1412 gateway
931: 1412 debbie
932: 1411 xbox360
933: 1411 sheena
934: 1410 madalina
935: 1407 yourmom
936: 1407 blonde
937: 1407 anamaria
938: 1405 please
939: 1404 beatriz
940: 1401 jimmy
941: 1401 jasmine1
942: 1399 bubbles1
943: 1398 whitney
944: 1398 poopoo
945: 1398 diamonds
946: 1398 barbara
947: 1397 trouble
948: 1396 united
949: 1396 sweetness
950: 1396 friendship
951: 1396 desiree
952: 1396 brian
953: 1395 pauline
954: 1395 741852
955: 1391 marley
956: 1391 bananas
957: 1389 sandy
958: 1388 hannah1
959: 1387 julius
960: 1385 leanne
961: 1385 chicago
962: 1384 twinkle
963: 1384 marie1
964: 1382 qwert
965: 1382 lover1
966: 1382 anita
967: 1381 pantera
968: 1379 87654321
969: 1378 birthday
970: 1377 shadow1
971: 1377 february
972: 1373 twilight
973: 1372 tucker
974: 1372 bebita
975: 1371 ashlee
976: 1370 imissyou
977: 1369 pollito
978: 1366 shelly
979: 1366 cookie1
980: 1365 catalina
981: 1364 147852369
982: 1363 beckham
983: 1363 123123123
984: 1362 simone
985: 1361 eugene
986: 1359 nursing
987: 1359 damian
988: 1358 iloveyou!
989: 1357 torres
990: 1357 panther
991: 1357 donald
992: 1355 joshua1
993: 1355 bobby
994: 1354 babyface
995: 1354 andre
996: 1353 trustno1
997: 1353 mommy
998: 1352 daniel1
999: 1351 juliana
1000: 1351 cassandra

Top 2,000 Passwords Of All Times

2010-12-15T14:37:00.003-05:00

Top 2,000 passwords of all times

If you copy, or re-post, please use credits or link it.
Thanks !

For those interested in the full list, it's here: ~20,000,000 passwords

Rank, Occurrence, Password
      1: 290834 123456
      2: 79096 12345
      3: 76822 123456789
      4: 59494 password
      5: 49977 iloveyou
      6: 33314 princess
      7: 21748 1234567
      8: 20902 rockyou
      9: 20575 12345678
    10: 16662 abc123
    11: 16247 nicole
    12: 15327 daniel
    13: 15168 babygirl
    14: 14760 monkey
    15: 14337 lovely
    16: 14119 jessica
    17: 14004 654321
    18: 13991 michael
    19: 13502 ashley
    20: 13472 qwerty
    21: 13297 111111
    22: 13139 iloveu
    23: 13039 000000
    24: 12732 michelle
    25: 11783 tigger
    26: 11497 sunshine
    27: 11303 chocolate
    28: 11118 password1
    29: 10851 soccer
    30: 10763 anthony
    31: 10742 friends
    32: 10567 butterfly
    33: 10565 purple
    34: 10517 angel
    35: 10176 jordan
    36: 9770 liverpool
    37: 9722 justin
    38: 9712 loveme
    39: 9623 fuckyou
    40: 9538 123123
    41: 9477 football
    42: 9328 secret
    43: 9171 andrea
    44: 9064 carlos
    45: 8987 jennifer
    46: 8970 joshua
    47: 8771 bubbles
    48: 8682 1234567890
    49: 8676 superman
    50: 8645 hannah
    51: 8552 amanda
    52: 8503 loveyou
    53: 8468 pretty
    54: 8411 basketball
    55: 8370 andrew
    56: 8319 angels
    57: 8290 tweety
    58: 8284 flower
    59: 8029 playboy
    60: 7918 hello
    61: 7878 elizabeth
    62: 7804 hottie
    63: 7774 tinkerbell
    64: 7747 charlie
    65: 7730 samantha
    66: 7664 barbie
    67: 7658 chelsea
    68: 7571 lovers
    69: 7539 teamo
    70: 7529 jasmine
    71: 7510 brandon
    72: 7435 666666
    73: 7351 shadow
    74: 7313 melissa
    75: 7249 eminem
    76: 7230 matthew
    77: 7215 robert
    78: 7160 danielle
    79: 7125 forever
    80: 6985 family
    81: 6781 jonathan
    82: 6666 987654321
    83: 6663 computer
    84: 6658 whatever
    85: 6618 dragon
    86: 6575 vanessa
    87: 6573 cookie
    88: 6552 naruto
    89: 6513 summer
    90: 6428 sweety
    91: 6396 spongebob
    92: 6328 joseph
    93: 6283 junior
    94: 6221 softball
    95: 6142 taylor
    96: 6123 yellow
    97: 6093 lauren
    98: 6085 daniela
    99: 6078 mickey
100: 6032 princesa
101: 5988 alexandra
102: 5885 alexis
103: 5868 jesus
104: 5859 estrella
105: 5850 miguel
106: 5841 william
107: 5803 thomas
108: 5761 beautiful
109: 5732 mylove
110: 5725 angela
111: 5677 patrick
112: 5674 poohbear
113: 5594 iloveme
114: 5505 sakura
115: 5491 adrian
116: 5443 destiny
117: 5443 alexander
118: 5408 christian
119: 5391 121212
120: 5348 sayang
121: 5339 america
122: 5322 dancer
123: 5308 monica
124: 5245 richard
125: 5239 112233
126: 5189 princess1
127: 5182 555555
128: 5174 diamond
129: 5136 carolina
130: 5115 steven
131: 5106 rangers
132: 5091 louise
133: 5070 orange
134: 5062 789456
135: 5056 999999
136: 5015 snoopy
137: 5012 11111
138: 5009 nathan
139: 5008 shorty
140: 4952 gabriel
141: 4943 hunter
142: 4905 cherry
143: 4845 killer
144: 4840 sandra
145: 4817 alejandro
146: 4815 buster
147: 4757 george
148: 4738 brittany
149: 4728 alejandra
150: 4710 patricia
151: 4670 rachel
152: 4635 tequiero
153: 4608 cheese
154: 4605 7777777
155: 4588 159753
156: 4582 arsenal
157: 4577 dolphin
158: 4561 antonio
159: 4555 ginger
160: 4554 heather
161: 4548 david
162: 4528 stephanie
163: 4512 peanut
164: 4503 blink182
165: 4497 sweetie
166: 4494 222222
167: 4482 987654
168: 4481 beauty
169: 4472 pokemon
170: 4468 victoria
171: 4466 honey
172: 4462 00000
173: 4459 fernando
174: 4452 maggie
175: 4436 chicken
176: 4433 corazon
177: 4431 pepper
178: 4430 rainbow
179: 4426 cristina
180: 4411 kisses
181: 4405 manuel
182: 4390 myspace
183: 4346 rebelde
184: 4328 angel1
185: 4303 ricardo
186: 4297 babygurl
187: 4277 heaven
188: 4264 baseball
189: 4260 55555
190: 4257 martin
191: 4252 greenday
192: 4243 november
193: 4168 alyssa
194: 4151 madison
195: 4145 123321
196: 4139 mother
197: 4124 123abc
198: 4099 batman
199: 4097 mahalkita
200: 4072 september
201: 4071 december
202: 4068 morgan
203: 4035 mariposa
204: 4024 maria
205: 4013 gabriela
206: 3999 iloveyou2
207: 3997 bailey
208: 3966 pamela
209: 3966 jeremy
210: 3942 gemini
211: 3940 shannon
212: 3940 kimberly
213: 3928 pictures
214: 3925 asshole
215: 3915 sophie
216: 3911 jessie
217: 3890 hellokitty
218: 3880 claudia
219: 3831 angelica
220: 3825 babygirl1
221: 3809 austin
222: 3793 horses
223: 3784 victor
224: 3780 mahalko
225: 3775 tiffany
226: 3768 mariana
227: 3763 eduardo
228: 3751 courtney
229: 3751 andres
230: 3749 booboo
231: 3736 harley
232: 3734 kissme
233: 3706 ronaldo
234: 3703 iloveyou1
235: 3695 october
236: 3694 precious
237: 3686 inuyasha
238: 3679 peaches
239: 3672 veronica
240: 3663 chris
241: 3653 888888
242: 3627 adriana
243: 3604 james
244: 3604 cutie
245: 3595 banana
246: 3593 prince
247: 3568 friend
248: 3567 jesus1
249: 3546 crystal
250: 3531 celtic
251: 3530 oliver
252: 3527 zxcvbnm
253: 3527 edward
254: 3524 diana
255: 3521 samsung
256: 3511 freedom
257: 3505 angelo
258: 3497 kenneth
259: 3492 master
260: 3488 scooby
261: 3475 sebastian
262: 3472 carmen
263: 3469 456789
264: 3468 rebecca
265: 3463 jackie
266: 3443 spiderman
267: 3442 johnny
268: 3441 karina
269: 3440 christopher
270: 3430 hotmail
271: 3402 school
272: 3401 0123456789
273: 3373 barcelona
274: 3371 august
275: 3367 orlando
276: 3346 samuel
277: 3340 cameron
278: 3335 slipknot
279: 3318 cutiepie
280: 3309 monkey1
281: 3301 bonita
282: 3295 50cent
283: 3291 kevin
284: 3291 bitch
285: 3290 casper
286: 3282 maganda
287: 3280 babyboy
288: 3270 brenda
289: 3267 kitten
290: 3267 adidas
291: 3257 karen
292: 3251 mustang
293: 3220 isabel
294: 3216 natalie
295: 3184 cuteako
296: 3164 javier
297: 3164 789456123
298: 3148 sarah
299: 3145 123654
300: 3142 bowwow
301: 3117 777777
302: 3111 portugal
303: 3108 marvin
304: 3105 laura
305: 3085 tigers
306: 3085 denise
307: 3074 jasper
308: 3071 volleyball
309: 3067 rockstar
310: 3065 january
311: 3055 nicholas
312: 3055 fuckoff
313: 3055 alicia
314: 3053 flowers
315: 3050 cristian
316: 3050 bianca
317: 3049 tintin
318: 3046 chester
319: 3040 chrisbrown
320: 3018 smokey
321: 3013 101010
322: 3012 silver
323: 3008 internet
324: 2998 sweet
325: 2983 dennis
326: 2981 strawberry
327: 2980 garfield
328: 2968 cassie
329: 2966 panget
330: 2962 francis
331: 2958 benfica
332: 2951 696969
333: 2942 love123
334: 2921 asdfgh
335: 2909 lollipop
336: 2895 olivia
337: 2885 cancer
338: 2882 camila
339: 2878 qwertyuiop
340: 2872 superstar
341: 2872 harrypotter
342: 2861 charles
343: 2859 ihateyou
344: 2857 midnight
345: 2850 monique
346: 2848 vincent
347: 2845 christine
348: 2832 apples
349: 2819 scorpio
350: 2812 jordan23
351: 2807 lorena
352: 2799 mercedes
353: 2795 katherine
354: 2794 andreea
355: 2793 charmed
356: 2787 icecream
357: 2787 abigail
358: 2785 rafael
359: 2781 mexico
360: 2763 brianna
361: 2760 nirvana
362: 2753 pookie
363: 2753 aaliyah
364: 2748 lovelove
365: 2746 johncena
366: 2746 fucker
367: 2741 abcdef
368: 2735 131313
369: 2732 benjamin
370: 2723 gangsta
371: 2721 brooke
372: 2708 333333
373: 2702 hiphop
374: 2692 aaaaaa
375: 2686 welcome
376: 2686 mybaby
377: 2685 sergio
378: 2684 metallica
379: 2672 travis
380: 2670 julian
381: 2664 myspace1
382: 2663 sabrina
383: 2659 babyblue
384: 2657 michael1
385: 2656 jeffrey
386: 2655 love
387: 2651 stephen
388: 2646 dakota
389: 2636 catherine
390: 2632 badboy
391: 2626 fernanda
392: 2615 westlife
393: 2609 blondie
394: 2608 sasuke
395: 2606 jackson
396: 2603 smiley
397: 2595 simple
398: 2594 melanie
399: 2587 steaua
400: 2586 roberto
401: 2584 dolphins
402: 2580 fluffy
403: 2572 teresa
404: 2554 piglet
405: 2548 ronald
406: 2543 asdfghjkl
407: 2540 slideshow
408: 2538 minnie
409: 2536 newyork
410: 2525 jason
411: 2510 raymond
412: 2502 santiago
413: 2499 88888888
414: 2498 muffin
415: 2496 jayson
416: 2492 5201314
417: 2491 jerome
418: 2488 gandako
419: 2487 gatita
420: 2475 246810
421: 2472 babyko
422: 2467 kitty
423: 2460 sweetheart
424: 2457 alberto
425: 2455 chivas
426: 2451 ladybug
427: 2450 popcorn
428: 2442 cookies
429: 2440 valeria
430: 2440 leslie
431: 2440 jenny
432: 2432 nicole1
433: 2432 12345678910
434: 2420 leonardo
435: 2419 232323
436: 2418 jayjay
437: 2417 dexter
438: 2416 liliana
439: 2411 amores
440: 2410 sexygirl
441: 2409 rockon
442: 2407 christ
443: 2404 babydoll
444: 2403 marcus
445: 2402 anthony1
446: 2396 bitch1
447: 2382 lover
448: 2381 miamor
449: 2380 fatima
450: 2379 chris1
451: 2373 single
452: 2370 eeyore
453: 2368 lalala
454: 2364 scooter
455: 2362 252525
456: 2353 natasha
457: 2351 skittles
458: 2341 brooklyn
459: 2337 159357
460: 2335 colombia
461: 2330 happy
462: 2325 winnie
463: 2325 teddybear
464: 2319 manutd
465: 2316 123456a
466: 2312 britney
467: 2311 katrina
468: 2306 christina
469: 2300 cocacola
470: 2294 pasaway
471: 2292 albert
472: 2289 mahal
473: 2288 grace
474: 2287 london
475: 2287 linda
476: 2281 tatiana
477: 2273 lakers
478: 2273 0123456
479: 2270 cantik
480: 2269 marie
481: 2265 teiubesc
482: 2262 147258369
483: 2259 charlotte
484: 2250 natalia
485: 2242 francisco
486: 2226 smile
487: 2224 amorcito
488: 2218 paola
489: 2214 angelito
490: 2211 hahaha
491: 2206 manchester
492: 2206 elephant
493: 2196 shelby
494: 2196 mommy1
495: 2193 147258
496: 2192 kelsey
497: 2192 amigos
498: 2189 genesis
499: 2185 turtle
500: 2184 xavier
501: 2184 snickers
502: 2176 stupid
503: 2176 marlon
504: 2176 linkinpark
505: 2174 claire
506: 2170 marina
507: 2168 147852
508: 2153 garcia
509: 2151 fuckyou1
510: 2150 diego
511: 2149 brandy
512: 2145 letmein
513: 2140 hockey
514: 2135 bonnie
515: 2135 444444
516: 2131 sharon
517: 2129 spider
518: 2125 iverson
519: 2119 andrei
520: 2117 rabbit
521: 2115 frankie
522: 2114 justine
523: 2112 disney
524: 2111 pimpin
525: 2106 54321
526: 2103 fashion
527: 2101 soccer1
528: 2094 red123
529: 2090 bestfriend
530: 2089 england
531: 2084 hermosa
532: 2081 qazwsx
533: 2076 bandit
534: 2076 456123
535: 2068 danny
536: 2068 allison
537: 2066 emily
538: 2065 lucky1
539: 2062 dallas
540: 2062 102030
541: 2061 miranda
542: 2058 sporting
543: 2057 camille
544: 2055 wilson
545: 2055 hearts
546: 2052 potter
547: 2050 pumpkin
548: 2046 guitar
549: 2044 katie
550: 2043 iloveu2
551: 2042 number1
552: 2040 phoenix
553: 2038 monster
554: 2038 212121
555: 2036 truelove
556: 2035 savannah
557: 2035 jayden
558: 2031 hottie1
559: 2030 player
560: 2024 people
561: 2020 ganda
562: 2019 timothy
563: 2018 scotland
564: 2018 nelson
565: 2017 jasmin
566: 2016 onelove
567: 2008 shakira
568: 2008 ilovehim
569: 2004 estrellita
570: 2002 bubble
571: 1999 sparky
572: 1995 smiles
573: 1993 brandon1
574: 1992 barney
575: 1986 sweets
576: 1981 evelyn
577: 1979 florida
578: 1978 parola
579: 1977 nikki
580: 1976 familia
581: 1975 motorola
582: 1974 love12
583: 1969 omarion
584: 1968 monkeys
585: 1968 canada
586: 1963 elijah
587: 1962 joanna
588: 1961 loverboy
589: 1959 thunder
590: 1959 emmanuel
591: 1957 ronnie
592: 1955 999999999
593: 1954 mamita
594: 1948 broken
595: 1945 rodrigo
596: 1943 lucky
597: 1940 maryjane
598: 1939 california
599: 1938 westside
600: 1934 yankees
601: 1929 mauricio
602: 1927 jackass
603: 1925 jamaica
604: 1922 justin1
605: 1922 amigas
606: 1916 shopping
607: 1916 preciosa
608: 1900 matrix
609: 1899 tennis
610: 1899 mariah
611: 1899 flores
612: 1893 isabella
613: 1892 trinity
614: 1888 bradley
615: 1887 sunflower
616: 1887 kathleen
617: 1886 jorge
618: 1884 hector
619: 1884 cupcake
620: 1880 elaine
621: 1878 martinez
622: 1877 robbie
623: 1876 gracie
624: 1875 hello1
625: 1874 valentina
626: 1874 friendster
627: 1874 connor
628: 1874 cheche
629: 1868 sammy
630: 1868 melody
631: 1865 darling
632: 1864 jamie
633: 1863 candy
634: 1860 abcdefg
635: 1859 santos
636: 1858 joanne
637: 1855 loser
638: 1854 fuckyou2
639: 1848 dominic
640: 1847 pebbles
641: 1841 swimming
642: 1841 sunshine1
643: 1837 millie
644: 1837 loving
645: 1835 compaq
646: 1831 gangster
647: 1831 blessed
648: 1826 taurus
649: 1826 gloria
650: 1824 aaron
651: 1823 tyler
652: 1814 kitkat
653: 1813 darkangel
654: 1809 megan
655: 1809 dreams
656: 1806 sweetpea
657: 1806 jessica1
658: 1806 ferrari
659: 1805 cynthia
660: 1805 cheyenne
661: 1804 bettyboop
662: 1803 snowball
663: 1801 dustin
664: 1799 a123456
665: 1798 purple1
666: 1798 iubire
667: 1797 starwars
668: 1796 violet
669: 1796 darren
670: 1788 kelly
671: 1788 bestfriends
672: 1783 inlove
673: 1782 biteme
674: 1782 batista
675: 1780 sophia
676: 1778 chacha
677: 1777 karla
678: 1776 sydney
679: 1773 marian
680: 1771 sexyme
681: 1771 010203
682: 1770 gerald
683: 1769 pogiako
684: 1769 jordan1
685: 1767 daddy1
686: 1766 zachary
687: 1763 daddysgirl
688: 1760 carebear
689: 1760 billabong
690: 1758 oscar
691: 1758 froggy
692: 1754 pinky
693: 1752 raiders
694: 1751 erika
695: 1749 skater
696: 1744 nenita
697: 1742 tigger1
698: 1741 gatito
699: 1741 charlie1
700: 1738 ashley1
701: 1731 buttercup
702: 1730 lokita
703: 1729 maldita
704: 1725 nichole
705: 1724 bambam
706: 1721 nothing
707: 1720 amber
708: 1718 glitter
709: 1718 apple
710: 1717 bella
711: 1710 123789
712: 1709 sister
713: 1704 zacefron
714: 1702 tokiohotel
715: 1700 money
716: 1700 lindsey
717: 1699 loveya
718: 1696 lovebug
719: 1696 bubblegum
720: 1695 darkness
721: 1694 dreamer
722: 1693 cecilia
723: 1692 google
724: 1691 marissa
725: 1690 lollypop
726: 1689 cooper
727: 1687 nicolas
728: 1684 lindsay
729: 1682 green
730: 1677 passion
731: 1675 ariana
732: 1674 kristine
733: 1674 fuckme
734: 1673 puppies
735: 1672 chubby
736: 1667 raquel
737: 1667 lonely
738: 1667 anderson
739: 1662 sammie
740: 1662 butter
741: 1661 willow
742: 1657 mario
743: 1657 caroline
744: 1655 sexybitch
745: 1653 mememe
746: 1652 susana
747: 1652 roxana
748: 1649 kristen
749: 1645 carter
750: 1643 hotstuff
751: 1643 baller
752: 1641 stacey
753: 1639 scorpion
754: 1638 sierra
755: 1637 miller
756: 1636 babylove
757: 1634 angelina
758: 1631 sweet16
759: 1631 012345
760: 1630 rocker
761: 1628 playgirl
762: 1620 marcos
763: 1620 gustavo
764: 1620 bhebhe
765: 1620 123qwe
766: 1619 kayla
767: 1619 chance
768: 1618 eagles
769: 1616 james1
770: 1615 football1
771: 1613 loveme1
772: 1611 milagros
773: 1609 stella
774: 1601 rocky
775: 1601 catdog
776: 1599 beyonce
777: 1598 lovely1
778: 1598 lilmama
779: 1598 daddy
780: 1597 armando
781: 1594 margarita
782: 1591 151515
783: 1590 lolita
784: 1589 202020
785: 1588 loves
786: 1586 gerard
787: 1586 freddy
788: 1584 undertaker
789: 1582 williams
790: 1582 amistad
791: 1581 qwerty1
792: 1577 caitlin
793: 1577 bryan
794: 1576 delfin
795: 1575 capricorn
796: 1572 dance
797: 1569 password2
798: 1568 martha
799: 1567 lizzie
800: 1567 PASSWORD
801: 1566 cheerleader
802: 1563 11111111
803: 1562 georgia
804: 1560 zxcvbn
805: 1560 matthew1
806: 1558 booger
807: 1556 enrique
808: 1556 141414
809: 1555 dancing
810: 1555 badgirl
811: 1553 andrew1
812: 1551 vampire
813: 1551 skyline
814: 1551 cuteme
815: 1551 chiquita
816: 1551 amelia
817: 1549 scoobydoo
818: 1549 angeles
819: 1548 janine
820: 1546 yamaha
821: 1546 tamara
822: 1546 ireland
823: 1546 carlitos
824: 1545 money1
825: 1544 sheila
826: 1544 kittycat
827: 1544 justme
828: 1544 hotdog
829: 1541 tristan
830: 1536 legolas
831: 1536 harvey
832: 1530 maddie
833: 1530 israel
834: 1526 michelle1
835: 1525 angie
836: 1523 jesuschrist
837: 1523 cinderella
838: 1520 lester
839: 1515 xxxxxx
840: 1514 ashton
841: 1513 thebest
842: 1512 ilovejesus
843: 1511 tazmania
844: 1511 remember
845: 1511 buddy1
846: 1509 paloma
847: 1509 lucky7
848: 1508 tekiero
849: 1508 deedee
850: 1507 princesita
851: 1507 peewee
852: 1506 jesucristo
853: 1505 patches
854: 1503 regina
855: 1503 miriam
856: 1503 cowboys
857: 1503 april
858: 1499 rosita
859: 1499 janice
860: 1498 felipe
861: 1497 myself
862: 1496 lipgloss
863: 1496 happy1
864: 1495 jazmin
865: 1495 chichi
866: 1492 pangit
867: 1490 genius
868: 1489 walter
869: 1489 mierda
870: 1488 arturo
871: 1488 741852963
872: 1486 tinker
873: 1486 awesome
874: 1485 hernandez
875: 1482 melvin
876: 1482 celeste
877: 1481 silvia
878: 1480 pussycat
879: 1473 molly
880: 1473 gorgeous
881: 1473 david1
882: 1471 animal
883: 1469 penguin
884: 1469 mylife
885: 1468 honeyko
886: 1462 loveu
887: 1462 babyboo
888: 1461 boomer
889: 1458 simpsons
890: 1456 lupita
891: 1453 johnson
892: 1452 panthers
893: 1451 hollywood
894: 1451 alfredo
895: 1449 musica
896: 1445 ilovegod
897: 1445 hawaii
898: 1443 sparkle
899: 1443 kristina
900: 1442 winter
901: 1440 hardcore
902: 1439 valerie
903: 1439 crazy
904: 1438 spencer
905: 1438 sexymama
906: 1438 scarface
907: 1437 098765
908: 1437 00000000
909: 1436 hailey
910: 1435 trixie
911: 1431 hayden
912: 1428 micheal
913: 1428 242424
914: 1427 wesley
915: 1426 0987654321
916: 1425 daisy
917: 1424 nikita
918: 1424 marisol
919: 1421 murphy
920: 1420 pineapple
921: 1420 jeremiah
922: 1419 isaiah
923: 1419 christmas
924: 1417 cesar
925: 1416 mhine
926: 1416 lolipop
927: 1415 chloe
928: 1414 butterfly1
929: 1413 lawrence
930: 1412 gateway
931: 1412 debbie
932: 1411 xbox360
933: 1411 sheena
934: 1410 madalina
935: 1407 yourmom
936: 1407 blonde
937: 1407 anamaria
938: 1405 please
939: 1404 beatriz
940: 1401 jimmy
941: 1401 jasmine1
942: 1399 bubbles1
943: 1398 whitney
944: 1398 poopoo
945: 1398 diamonds
946: 1398 barbara
947: 1397 trouble
948: 1396 united
949: 1396 sweetness
950: 1396 friendship
951: 1396 desiree
952: 1396 brian
953: 1395 pauline
954: 1395 741852
955: 1391 marley
956: 1391 bananas
957: 1389 sandy
958: 1388 hannah1
959: 1387 julius
960: 1385 leanne
961: 1385 chicago
962: 1384 twinkle
963: 1384 marie1
964: 1382 qwert
965: 1382 lover1
966: 1382 anita
967: 1381 pantera
968: 1379 87654321
969: 1378 birthday
970: 1377 shadow1
971: 1377 february
972: 1373 twilight
973: 1372 tucker
974: 1372 bebita
975: 1371 ashlee
976: 1370 imissyou
977: 1369 pollito
978: 1366 shelly
979: 1366 cookie1
980: 1365 catalina
981: 1364 147852369
982: 1363 beckham
983: 1363 123123123
984: 1362 simone
985: 1361 eugene
986: 1359 nursing
987: 1359 damian
988: 1358 iloveyou!
989: 1357 torres
990: 1357 panther
991: 1357 donald
992: 1355 joshua1
993: 1355 bobby
994: 1354 babyface
995: 1354 andre
996: 1353 trustno1
997: 1353 mommy
998: 1352 daniel1
999: 1351 juliana
1000: 1351 cassandra
1001: 1350 dinamo
1002: 1350 autumn
1003: 1347 sexylady
1004: 1347 animals
1005: 1346 14344
1006: 1345 perfect
1007: 1344 mendoza
1008: 1343 bitches
1009: 1341 bullshit
1010: 1340 mariel
1011: 1337 852456
1012: 1335 marcela
1013: 1335 drpepper
1014: 1334 buddy
1015: 1333 gerardo
1016: 1332 titanic
1017: 1332 alison
1018: 1331 moomoo
1019: 1330 robert1
1020: 1329 blossom
1021: 1326 paulina
1022: 1326 abcd1234
1023: 1325 bulldogs
1024: 1323 simpleplan
1025: 1323 cutie1
1026: 1322 bethany
1027: 1321 samson
1028: 1321 kucing
1029: 1321 fabian
1030: 1320 ILOVEYOU
1031: 1319 serenity
1032: 1319 harold
1033: 1318 hollister
1034: 1317 willie
1035: 1314 tyrone
1036: 1313 rodriguez
1037: 1313 lovehurts
1038: 1312 amanda1
1039: 1311 kaylee
1040: 1309 pisces
1041: 1309 paradise
1042: 1309 1111111
1043: 1308 patito
1044: 1307 piolin
1045: 1307 cowboy
1046: 1306 reggie
1047: 1304 diesel
1048: 1302 salvador
1049: 1300 dianne
1050: 1300 143143
1051: 1298 stars
1052: 1298 joseluis
1053: 1298 chanel
1054: 1297 peterpan
1055: 1297 coffee
1056: 1296 sanchez
1057: 1292 diosesamor
1058: 1291 1234
1059: 1290 dancer1
1060: 1289 element
1061: 1288 derrick
1062: 1287 theresa
1063: 1287 grandma
1064: 1287 always
1065: 1285 marshall
1066: 1285 helena
1067: 1285 ashleigh
1068: 1283 181818
1069: 1282 tanner
1070: 1282 jason1
1071: 1279 trisha
1072: 1279 sweet1
1073: 1279 mitchell
1074: 1279 mihaela
1075: 1279 chinita
1076: 1279 alexandru
1077: 1278 bulldog
1078: 1277 love4ever
1079: 1275 shane
1080: 1274 calvin
1081: 1274 brownie
1082: 1271 thuglife
1083: 1271 amormio
1084: 1268 margaret
1085: 1267 phillip
1086: 1267 kitty1
1087: 1267 aquarius
1088: 1264 thumper
1089: 1263 rosario
1090: 1262 morena
1091: 1262 heart
1092: 1259 sammy1
1093: 1255 marius
1094: 1255 lorraine
1095: 1254 panda
1096: 1254 aaaaa
1097: 1252 yvonne
1098: 1251 kaitlyn
1099: 1251 hayley
1100: 1251 babycakes
1101: 1250 bigboy
1102: 1246 esther
1103: 1244 frances
1104: 1243 gerrard
1105: 1241 catarina
1106: 1241 archie
1107: 1240 sexy123
1108: 1239 tweety1
1109: 1238 gregory
1110: 1236 pickles
1111: 1236 danger
1112: 1236 arnold
1113: 1235 marco
1114: 1234 rockme
1115: 1234 brittney
1116: 1232 babies
1117: 1231 taylor1
1118: 1231 superman1
1119: 1230 lorenzo
1120: 1230 hamster
1121: 1228 sofia
1122: 1226 donkey
1123: 1225 dominique
1124: 1224 11223344
1125: 1223 trevor
1126: 1223 rocku
1127: 1222 roxanne
1128: 1222 jenjen
1129: 1221 yasmin
1130: 1221 virginia
1131: 1221 creative
1132: 1220 audrey
1133: 1219 parker
1134: 1219 happiness
1135: 1216 godisgood
1136: 1216 chrissy
1137: 1216 castillo
1138: 1215 police
1139: 1215 giggles
1140: 1215 1q2w3e4r
1141: 1214 speedy
1142: 1214 shorty1
1143: 1214 cuddles
1144: 1213 sports
1145: 1213 joyjoy
1146: 1213 italia
1147: 1211 nadine
1148: 1209 boston
1149: 1207 tyler1
1150: 1206 black
1151: 1205 pelusa
1152: 1205 beautiful1
1153: 1205 753951
1154: 1204 summer1
1155: 1200 kittykat
1156: 1198 fabiola
1157: 1198 darwin
1158: 1197 jocelyn
1159: 1197 cheer
1160: 1196 rosebud
1161: 1194 junjun
1162: 1194 cristo
1163: 1194 asdfg
1164: 1193 mickey1
1165: 1192 ghetto
1166: 1188 julio
1167: 1187 maxwell
1168: 1186 maverick
1169: 1186 madison1
1170: 1186 cuteko
1171: 1185 russell
1172: 1183 wildcats
1173: 1183 fantasy
1174: 1183 bloods
1175: 1182 faith
1176: 1181 sarita
1177: 1181 alisha
1178: 1180 rooney
1179: 1180 rochelle
1180: 1180 gabrielle
1181: 1180 babygurl1
1182: 1177 kayleigh
1183: 1176 toyota
1184: 1176 macmac
1185: 1175 college
1186: 1173 mississippi
1187: 1171 gilbert
1188: 1170 justice
1189: 1170 golden
1190: 1169 soledad
1191: 1169 curtis
1192: 1169 12341234
1193: 1168 mickeymouse
1194: 1168 1q2w3e
1195: 1167 rascal
1196: 1167 naughty
1197: 1166 william1
1198: 1161 gwapako
1199: 1159 prettygirl
1200: 1158 singer
1201: 1158 friends1
1202: 1157 jellybean
1203: 1157 camilo
1204: 1156 busted
1205: 1155 johanna
1206: 1155 hershey
1207: 1154 pretty1
1208: 1154 123654789
1209: 1153 yolanda
1210: 1153 pinkie
1211: 1152 buttons
1212: 1151 philip
1213: 1151 love13
1214: 1151 holas
1215: 1151 elizabeth1
1216: 1150 marilyn
1217: 1150 bigdaddy
1218: 1149 ramona
1219: 1148 carla
1220: 1148 australia
1221: 1148 7654321
1222: 1146 franklin
1223: 1146 bismillah
1224: 1146 9876543210
1225: 1145 pink123
1226: 1144 photos
1227: 1143 vanilla
1228: 1142 erick
1229: 1141 briana
1230: 1140 hello123
1231: 1138 hilary
1232: 1137 pedro
1233: 1137 jacob
1234: 1134 unicorn
1235: 1134 loveme2
1236: 1133 callum
1237: 1132 watermelon
1238: 1132 juancarlos
1239: 1132 janelle
1240: 1132 PRINCESS
1241: 1131 lourdes
1242: 1130 ihateu
1243: 1129 dragons
1244: 1128 tania
1245: 1128 rahasia
1246: 1128 lovergirl
1247: 1126 latina
1248: 1124 shirley
1249: 1124 sapphire
1250: 1123 diablo
1251: 1123 cheer1
1252: 1122 papito
1253: 1122 breanna
1254: 1120 montana
1255: 1120 cricket
1256: 1119 warren
1257: 1119 asshole1
1258: 1119 22222
1259: 1118 scotty
1260: 1118 lucky13
1261: 1118 dylan
1262: 1116 tiger
1263: 1116 passw0rd
1264: 1115 lavender
1265: 1115 emerald
1266: 1113 yoyoyo
1267: 1112 yellow1
1268: 1112 teamomucho
1269: 1112 iluvme
1270: 1112 douglas
1271: 1111 therock
1272: 1111 aurora
1273: 1108 emanuel
1274: 1107 krystal
1275: 1107 hunter1
1276: 1107 flower1
1277: 1107 belinda
1278: 1104 little
1279: 1104 010101
1280: 1103 hotgirl
1281: 1102 idontknow
1282: 1102 cuties
1283: 1101 valentine
1284: 1101 poohbear1
1285: 1099 pikachu
1286: 1099 diamond1
1287: 1096 iloveu1
1288: 1095 babyphat
1289: 1094 goddess
1290: 1093 nascar
1291: 1093 ballet
1292: 1092 winston
1293: 1092 peanut1
1294: 1092 kittens
1295: 1091 damien
1296: 1091 171717
1297: 1089 rangers1
1298: 1088 rocky1
1299: 1088 charlene
1300: 1086 0000000000
1301: 1085 coolgirl
1302: 1084 caramelo
1303: 1083 lucero
1304: 1082 maymay
1305: 1081 wendy
1306: 1081 selena
1307: 1080 copper
1308: 1080 cindy
1309: 1079 slayer
1310: 1078 volcom
1311: 1076 baby123
1312: 1076 1435254
1313: 1075 kingkong
1314: 1075 angelita
1315: 1074 pickle
1316: 1074 alexa
1317: 1072 love1
1318: 1069 lovelife
1319: 1069 guadalupe
1320: 1068 houston
1321: 1068 142536
1322: 1067 handsome
1323: 1066 paula
1324: 1066 kissmyass
1325: 1066 esmeralda
1326: 1065 wicked
1327: 1065 shithead
1328: 1065 dayana
1329: 1063 candy1
1330: 1062 loulou
1331: 1062 incubus
1332: 1062 iloveme1
1333: 1061 nathaniel
1334: 1061 crazy1
1335: 1061 buster1
1336: 1061 boogie
1337: 1060 sexybabe
1338: 1059 shaggy
1339: 1058 richie
1340: 1058 ramirez
1341: 1058 phoebe
1342: 1058 falloutboy
1343: 1057 teacher
1344: 1057 rayray
1345: 1057 converse
1346: 1056 2cute4u
1347: 1055 special
1348: 1055 norman
1349: 1055 madonna
1350: 1055 connie
1351: 1054 spongebob1
1352: 1054 myname
1353: 1054 dianita
1354: 1053 music
1355: 1053 eunice
1356: 1052 marisa
1357: 1052 124578
1358: 1051 sassy1
1359: 1051 chelsea1
1360: 1051 1111111111
1361: 1050 yahoo
1362: 1050 hotchick
1363: 1049 sagitario
1364: 1049 billy
1365: 1049 080808
1366: 1048 angel123
1367: 1047 kristin
1368: 1047 family1
1369: 1046 sexy12
1370: 1046 linkin
1371: 1045 spanky
1372: 1045 lacoste
1373: 1045 danica
1374: 1044 iceman
1375: 1044 cutegirl
1376: 1043 campanita
1377: 1042 realmadrid
1378: 1042 161616
1379: 1041 a12345
1380: 1038 liberty
1381: 1038 jesse
1382: 1037 peter
1383: 1036 password123
1384: 1035 windows
1385: 1035 molly1
1386: 1033 ronaldinho
1387: 1032 gothic
1388: 1031 walker
1389: 1030 tommy
1390: 1030 atlanta
1391: 1029 kelvin
1392: 1029 goldfish
1393: 1028 mookie
1394: 1028 maribel
1395: 1028 chicken1
1396: 1028 0000000
1397: 1027 juventus
1398: 1026 moises
1399: 1025 ranger
1400: 1025 esteban
1401: 1024 mahalkoh
1402: 1024 leelee
1403: 1024 fresita
1404: 1023 giovanni
1405: 1022 harry
1406: 1021 tequieromucho
1407: 1021 preston
1408: 1020 snuggles
1409: 1020 erica
1410: 1019 sniper
1411: 1019 newcastle
1412: 1019 celticfc
1413: 1019 1qaz2wsx
1414: 1018 ecuador
1415: 1018 austin1
1416: 1017 tagged
1417: 1017 stefan
1418: 1016 hotpink
1419: 1015 soulmate
1420: 1015 shutup
1421: 1015 sassy
1422: 1015 arthur
1423: 1014 951753
1424: 1013 taytay
1425: 1013 merlin
1426: 1013 honey1
1427: 1012 thomas1
1428: 1012 marlboro
1429: 1012 iverson3
1430: 1011 playboy1
1431: 1011 lunita
1432: 1010 bernard
1433: 1010 12345a
1434: 1009 peace
1435: 1006 brandi
1436: 1004 southside
1437: 1004 arlene
1438: 1003 loser1
1439: 1002 missy
1440: 1001 blueeyes
1441: 1000 rachelle
1442: 1000 michel
1443: 1000 fatboy
1444:    999 mamapapa
1445:    999 mackenzie
1446:    999 champion
1447:    998 ernesto
1448:    998 darius
1449:    998 282828
1450:    997 landon
1451:    997 alexia
1452:    995 nancy
1453:    995 edgar
1454:    995 99999
1455:    994 nicola
1456:    993 nissan
1457:    993 michele
1458:    993 cosita
1459:    992 hermione
1460:    991 steelers
1461:    990 tiger1
1462:    989 starlight
1463:    989 judith
1464:    988 coolcat
1465:    987 unique
1466:    987 morales
1467:    986 rivera
1468:    985 rodney
1469:    985 maurice
1470:    985 dimples
1471:    985 chocolate1
1472:    984 katelyn
1473:    984 carrie
1474:    983 random
1475:    983 iluvu
1476:    982 viviana
1477:    982 esperanza
1478:    982 111222
1479:    981 kennedy
1480:    981 gonzalez
1481:    980 pierre
1482:    978 softball1
1483:    977 spirit
1484:    976 nintendo
1485:    976 moonlight
1486:    973 baby12
1487:    972 marlene
1488:    972 love22
1489:    971 234567
1490:    968 shasha
1491:    967 newlife
1492:    967 goober
1493:    967 children
1494:    966 snowflake
1495:    966 bunny
1496:    965 stanley
1497:    965 father
1498:    965 doraemon
1499:    964 winner
1500:    964 ingrid
1501:    964 77777
1502:    962 geraldine
1503:    961 romance
1504:    961 kathryn
1505:    961 dimple
1506:    961 dillon
1507:    958 jefferson
1508:    958 bhaby
1509:    957 tweetybird
1510:    957 something
1511:    957 allstar
1512:    956 jermaine
1513:    956 abcde
1514:    955 runescape
1515:    955 pitbull
1516:    955 paramore
1517:    955 nigger
1518:    955 france
1519:    954 fucku
1520:    953 seventeen
1521:    953 romania
1522:    953 bitchy
1523:    953 ballin
1524:    952 mariela
1525:    952 emotional
1526:    952 blue123
1527:    951 smallville
1528:    951 ricky
1529:    951 loveless
1530:    951 godbless
1531:    950 peluche
1532:    949 meghan
1533:    949 garrett
1534:    949 cooldude
1535:    949 cassidy
1536:    949 alonso
1537:    948 skippy
1538:    948 mykids
1539:    947 puppy
1540:    947 clover
1541:    947 134679
1542:    946 daisy1
1543:    946 cherries
1544:    945 ximena
1545:    945 smudge
1546:    945 chopper
1547:    944 mexico1
1548:    944 goldie
1549:    944 domino
1550:    944 bella1
1551:    944 andreita
1552:    943 vanesa
1553:    943 thailand
1554:    943 julie
1555:    942 kaykay
1556:    942 070707
1557:    941 karate
1558:    941 gladys
1559:    940 freddie
1560:    940 boricua
1561:    940 annie
1562:    939 janjan
1563:    939 computer1
1564:    939 basket
1565:    939 acuario
1566:    939 262626
1567:    938 sunset
1568:    937 blueberry
1569:    936 yugioh
1570:    936 pakistan
1571:    936 maggie1
1572:    936 kendra
1573:    936 joyce
1574:    936 hummer
1575:    936 coconut
1576:    935 marjorie
1577:    934 negrita
1578:    934 destiny1
1579:    934 blue22
1580:    934 amber1
1581:    932 angelbaby
1582:    931 whatever1
1583:    931 dipset
1584:    931 alexis1
1585:    930 kirsty
1586:    930 danilo
1587:    929 cameron1
1588:    928 aileen
1589:    928 191919
1590:    927 sponge
1591:    927 samantha1
1592:    927 groovy
1593:    927 booboo1
1594:    926 swordfish
1595:    926 blahblah
1596:    925 harmony
1597:    924 kevin1
1598:    924 dragon1
1599:    923 ilovemyself
1600:    923 granny
1601:    923 cheeky
1602:    923 abraham
1603:    922 guillermo
1604:    920 poopie
1605:    920 cheryl
1606:    920 bintang
1607:    920 babyboy1
1608:    918 wrestling
1609:    918 dragonfly
1610:    917 green1
1611:    917 alfonso
1612:    915 ragnarok
1613:    915 nathan1
1614:    913 yourock
1615:    913 serena
1616:    913 bonbon
1617:    912 michaela
1618:    912 jazmine
1619:    912 blacky
1620:    911 carlo
1621:    910 theone
1622:    909 mikey
1623:    909 manunited
1624:    909 iloveboys
1625:    909 eclipse
1626:    908 rock you
1627:    908 bogdan
1628:    907 mollie
1629:    907 love69
1630:    907 karlita
1631:    906 warrior
1632:    906 jillian
1633:    905 punkrock
1634:    904 patrick1
1635:    904 fender
1636:    904 catalin
1637:    904 bugsbunny
1638:    903 melisa
1639:    903 christy
1640:    902 supergirl
1641:    902 miracle
1642:    902 lilwayne
1643:    902 helpme
1644:    902 doggie
1645:    901 harley1
1646:    901 alianza
1647:    899 munchkin
1648:    899 hollie
1649:    899 brother
1650:    898 puppylove
1651:    898 jennifer1
1652:    897 violeta
1653:    897 moreno
1654:    897 maureen
1655:    897 emilio
1656:    896 ilovechris
1657:    895 makayla
1658:    894 mmmmmm
1659:    894 gymnastics
1660:    893 bailey1
1661:    892 rachael
1662:    892 milkshake
1663:    892 athena
1664:    891 john316
1665:    891 blabla
1666:    890 goodgirl
1667:    889 holly
1668:    888 virgin
1669:    887 mathew
1670:    887 kenzie
1671:    887 juanita
1672:    887 159951
1673:    886 pepper1
1674:    884 ingeras
1675:    884 heyhey
1676:    884 caramel
1677:    883 mckenzie
1678:    883 katkat
1679:    882 bullet
1680:    881 steven1
1681:    880 kenny
1682:    880 estrela
1683:    880 estefania
1684:    879 manuela
1685:    879 baseball1
1686:    878 love14
1687:    878 alfred
1688:    877 elena
1689:    877 casey
1690:    877 1password
1691:    876 geminis
1692:    875 lenlen
1693:    875 keisha
1694:    874 redrose
1695:    874 danny1
1696:    874 chandler
1697:    874 aubrey
1698:    873 jajaja
1699:    873 eternity
1700:    872 godislove
1701:    871 success
1702:    871 lasvegas
1703:    871 butthead
1704:    870 jupiter
1705:    870 felicia
1706:    869 seven7
1707:    869 harrison
1708:    869 florin
1709:    868 duncan
1710:    868 danielle1
1711:    867 starfish
1712:    866 scrappy
1713:    865 wizard
1714:    865 wallace
1715:    865 santana
1716:    865 holiday
1717:    863 asdfjkl;
1718:    863 ariel
1719:    863 america1
1720:    862 ginger1
1721:    861 mayra
1722:    861 chelle
1723:    861 argentina
1724:    860 luisa
1725:    859 myangel
1726:    859 lampard
1727:    859 fiorella
1728:    859 2hot4u
1729:    858 stinky
1730:    858 rihanna
1731:    858 badass
1732:    857 online
1733:    856 yesenia
1734:    856 joseph1
1735:    856 denisa
1736:    856 blackie
1737:    855 sailormoon
1738:    855 deanna
1739:    854 popeye
1740:    854 jaguar
1741:    853 killer1
1742:    853 joana
1743:    853 aaron1
1744:    852 colleen
1745:    851 freaky
1746:    851 billie
1747:    850 junior1
1748:    850 hehehe
1749:    850 golfinho
1750:    849 sarah1
1751:    849 gonzales
1752:    849 futbol
1753:    849 dragoste
1754:    847 redsox
1755:    847 love11
1756:    847 kathy
1757:    846 dramaqueen
1758:    845 mermaid
1759:    844 josephine
1760:    843 welcome1
1761:    842 monika
1762:    842 carito
1763:    841 yankee
1764:    841 kirsten
1765:    841 carina
1766:    841 asdasd
1767:    841 arianna
1768:    840 sugar
1769:    840 clayton
1770:    840 baxter
1771:    839 sexylove
1772:    839 computadora
1773:    838 ludacris
1774:    838 ilovematt
1775:    838 carol
1776:    837 melissa1
1777:    837 holden
1778:    837 ABC123
1779:    836 jonjon
1780:    836 berenice
1781:    835 frank
1782:    834 yvette
1783:    834 teddy
1784:    834 scott
1785:    834 sasha
1786:    834 honduras
1787:    834 fucku2
1788:    834 clifford
1789:    833 momdad
1790:    833 liverpoolfc
1791:    833 forever1
1792:    833 dwayne
1793:    833 divina
1794:    832 lovesucks
1795:    832 ilovejosh
1796:    832 callie
1797:    831 tracey
1798:    831 rebeca
1799:    830 stevie
1800:    830 joejonas
1801:    829 mibebe
1802:    829 fishing
1803:    829 1212312121
1804:    828 password12
1805:    828 nacional
1806:    828 kisskiss
1807:    828 fergie
1808:    828 conejo
1809:    827 coolio
1810:    827 272727
1811:    826 ronaldo7
1812:    826 hotmama
1813:    826 bruno
1814:    825 vivian
1815:    825 steph
1816:    825 evanescence
1817:    824 thegame
1818:    824 richard1
1819:    824 manson
1820:    823 aventura
1821:    821 simona
1822:    821 rockyou1
1823:    821 love101
1824:    821 eastside
1825:    821 cristi
1826:    820 gordon
1827:    820 cristiano
1828:    820 cleopatra
1829:    820 88888
1830:    819 loveu2
1831:    818 sublime
1832:    818 redneck
1833:    817 knight
1834:    817 fernandez
1835:    817 corona
1836:    817 brayan
1837:    816 valentin
1838:    816 dalton
1839:    816 change
1840:    815 monday
1841:    815 maxine
1842:    815 blanca
1843:    814 mahalq
1844:    814 luisito
1845:    814 963852
1846:    813 qwe123
1847:    813 henry
1848:    812 Password
1849:    811 friday
1850:    811 annette
1851:    810 roland
1852:    810 fabulous
1853:    810 alvin
1854:    809 pablo
1855:    809 marcelo
1856:    808 martina
1857:    808 love21
1858:    807 stewart
1859:    807 maryann
1860:    807 logitech
1861:    807 cuttie
1862:    807 alaska
1863:    806 jersey
1864:    805 yanyan
1865:    805 wolves
1866:    805 roberta
1867:    805 motherfucker
1868:    804 morris
1869:    803 warriors
1870:    803 raiders1
1871:    803 prettyme
1872:    803 microsoft
1873:    803 gabby
1874:    803 dolphin1
1875:    803 agosto
1876:    803 8675309
1877:    802 orange1
1878:    802 noodles
1879:    802 medina
1880:    802 jennie
1881:    802 cherry1
1882:    801 smelly
1883:    801 sexy69
1884:    801 carlos1
1885:    801 555666
1886:    799 missy1
1887:    799 marines
1888:    799 lizard
1889:    798 cheetah
1890:    798 candice
1891:    797 single1
1892:    797 brendan
1893:    796 tricia
1894:    795 tequila
1895:    794 romeo
1896:    794 heather1
1897:    794 090909
1898:    793 saints
1899:    793 leonard
1900:    793 castro
1901:    792 kawasaki
1902:    792 iluvyou
1903:    792 grandad
1904:    791 vegeta
1905:    791 pirates
1906:    791 filipa
1907:    789 love23
1908:    789 kimkim
1909:    788 messenger
1910:    788 kieran
1911:    788 howard
1912:    788 denver
1913:    787 maximus
1914:    787 legend
1915:    786 randy
1916:    786 juliet
1917:    786 jesus7
1918:    786 hercules
1919:    785 jetaime
1920:    785 drowssap
1921:    784 everton
1922:    784 cintaku
1923:    784 amore
1924:    783 suzanne
1925:    783 kendall
1926:    783 jacqueline
1927:    783 456456
1928:    782 honeybee
1929:    782 charmaine
1930:    782 antonia
1931:    781 platinum
1932:    781 nightmare
1933:    781 drummer
1934:    781 bubba1
1935:    781 alvaro
1936:    780 mother1
1937:    780 jonas
1938:    778 shalom
1939:    778 mystuff
1940:    778 german
1941:    777 shiela
1942:    777 ruben
1943:    777 madeline
1944:    776 snowman
1945:    776 romero
1946:    776 leticia
1947:    775 turkey
1948:    775 lollol
1949:    774 pancho
1950:    774 mandy
1951:    774 dulce
1952:    774 angel12
1953:    773 edison
1954:    772 sayangku
1955:    772 rocknroll
1956:    772 freckles
1957:    772 ashanti
1958:    771 sweetgirl
1959:    771 Princess
1960:    770 yousuck
1961:    770 andreia
1962:    769 juanito
1963:    769 ismael
1964:    769 ericka
1965:    769 celine
1966:    769 020202
1967:    768 promise
1968:    768 freedom1
1969:    768 franco
1970:    768 chingy
1971:    767 taekwondo
1972:    767 julia
1973:    766 trinidad
1974:    766 smokey1
1975:    766 asd123
1976:    766 angel2
1977:    766 alexandre
1978:    765 melinda
1979:    765 jeremy1
1980:    764 jacob1
1981:    764 arcangel
1982:    763 sixteen
1983:    763 precious1
1984:    763 ganteng
1985:    762 qazwsxedc
1986:    762 cowgirl
1987:    761 cracker
1988:    760 phantom
1989:    759 peaches1
1990:    759 newyork1
1991:    759 mustang1
1992:    759 budlight
1993:    758 private
1994:    758 hamilton
1995:    757 surfer
1996:    757 renato
1997:    757 loveyou2
1998:    757 laptop
1999:    756 loveable
2000:    756 kenshin

Gawker Passwords list

2010-12-14T11:15:00.006-05:00

~ 230,000 Gawker Passwords

The Gawker Media Hack is a case study on what NOT To Do!
From taunting hackers that obviously know more about computers than the entire Gawker team, Using 30 years old obsolete encryption, Calling their users and clients "peasants" while being aware that something is obviously wrong, and finally being so damn moronic that even when the account of the CEO is hacked publicly, still wondering what is going on.

Gawker did obviously did not care at all about your security:
Little excerpt from the campfire chat between Gawker's employees about your security.
Please note that this log was dated July 22, 2010 or roughly 5 months before the public release of the hack. 5 months! They were hacked for 5 months and had "no clues" whatsoever, besides having user names, emails and passwords published in clear.
I think they are in due course to win a Darwin Award.

Excerpt:

"uh oh, 3chan is apparently posting usernames and passwords"
" if it's ours, that's a problem"
"Gawker users"
"oh, well. unimportant"
"Just the peasants?"

Sources and credit: www.thenextweb.com

I don't need to re-write how bad it was, this article from Daniel Kennedy explains it very well: The Real Lessons Of Gawker’s Security Mess
As for me, it took me very little time to crack 15,000 passwords, about 12 minutes to crack 82,600 passwords, and a bit more to crack 200,000 (sorry, I have a slow machine...)
I publish those results for the sake of statistical analysis, and in the hope that you will understand once for all that you need strong and long passwords.

If you don't know why you should, or if you do business on the internet, reading one of the following will probably help you a lot.

Gawker Password list

Loaded ~635,000 passwords hashes
Guessed ~229,289, About 36% complete
Sorted by Occurrences, Most used first with Rank and count

If you copy, or re-post, please use credits or link it.
Thanks !

Full File located here

First 1000 (Limited Blogspot space)
Rank, Occurrence, Password

   1: >> 2516: >> 123456
   2: >> 2190: >> password
   3: >> 1205: >> 12345678
   4: >> 782: >> lifehack
   5: >> 696: >> qwerty
   6: >> 499: >> abc123
   7: >> 459: >> 12345
   8: >> 439: >> monkey
   9: >> 413: >> 111111
10: >> 385: >> consumer
11: >> 376: >> letmein
12: >> 351: >> 1234
13: >> 318: >> dragon
14: >> 306: >> trustno1
15: >> 303: >> baseball
16: >> 302: >> gizmodo
17: >> 300: >> whatever
18: >> 297: >> superman
19: >> 276: >> 1234567
20: >> 266: >> sunshine
21: >> 266: >> iloveyou
22: >> 262: >> fuckyou
23: >> 256: >> starwars
24: >> 255: >> shadow
25: >> 241: >> princess
26: >> 234: >> cheese
27: >> 231: >> 123123
28: >> 229: >> computer
29: >> 226: >> gawker
30: >> 223: >> football
31: >> 204: >> blahblah
32: >> 203: >> nintendo
33: >> 199: >> 000000
34: >> 198: >> soccer
35: >> 195: >> 654321
36: >> 193: >> asdfasdf
37: >> 184: >> master
38: >> 182: >> passw0rd
39: >> 182: >> michael
40: >> 175: >> hello
41: >> 170: >> kotaku
42: >> 167: >> pepper
43: >> 165: >> jennifer
44: >> 165: >> 666666
45: >> 164: >> welcome
46: >> 164: >> buster
47: >> 161: >> Password
48: >> 159: >> batman
49: >> 157: >> maggie
50: >> 157: >> 1q2w3e4r
51: >> 154: >> michelle
52: >> 153: >> killer
53: >> 153: >> andrew
54: >> 151: >> pokemon
55: >> 151: >> internet
56: >> 149: >> biteme
57: >> 148: >> orange
58: >> 148: >> jordan
59: >> 147: >> ginger
60: >> 145: >> 123
61: >> 144: >> aaaaaa
62: >> 138: >> tigger
63: >> 137: >> charlie
64: >> 136: >> chicken
65: >> 135: >> nothing
66: >> 132: >> fuckoff
67: >> 130: >> deadspin
68: >> 125: >> valleywa
69: >> 125: >> qwerty12
70: >> 125: >> george
71: >> 124: >> swordfis
72: >> 124: >> summer
73: >> 122: >> asdf
74: >> 121: >> matthew
75: >> 121: >> asdfgh
76: >> 120: >> mustang
77: >> 119: >> yankees
78: >> 117: >> hannah
79: >> 117: >> asdfghjk
80: >> 117: >> 1qaz2wsx
81: >> 116: >> cookie
82: >> 115: >> purple
83: >> 115: >> midnight
84: >> 115: >> 123qwe
85: >> 114: >> scooter
86: >> 114: >> banana
87: >> 113: >> matrix
88: >> 113: >> jezebel
89: >> 113: >> daniel
90: >> 111: >> hunter
91: >> 111: >> freedom
92: >> 110: >> secret
93: >> 110: >> redsox
94: >> 108: >> spiderma
95: >> 108: >> phoenix
96: >> 108: >> joshua
97: >> 108: >> jessica
98: >> 108: >> asshole
99: >> 107: >> william
100: >> 107: >> qwertyui
101: >> 107: >> jackson
102: >> 107: >> foobar
103: >> 106: >> nicole
104: >> 106: >> 123321
105: >> 105: >> peanut
106: >> 104: >> samantha
107: >> 104: >> mickey
108: >> 104: >> booger
109: >> 103: >> poop
110: >> 102: >> hockey
111: >> 100: >> thx1138
112: >> 100: >> 121212
113: >> 99: >> ashley
114: >> 98: >> silver
115: >> 98: >> gizmodo1
116: >> 98: >> chocolat
117: >> 98: >> booboo
118: >> 97: >> metallic
119: >> 97: >> 1q2w3e
120: >> 96: >> bailey
121: >> 95: >> google
122: >> 95: >> babygirl
123: >> 94: >> thomas
124: >> 94: >> simpsons
125: >> 94: >> remember
126: >> 94: >> gateway
127: >> 93: >> oliver
128: >> 93: >> monster
129: >> 92: >> qazwsx
130: >> 91: >> taylor
131: >> 91: >> madison
132: >> 91: >> guitar
133: >> 91: >> anthony
134: >> 90: >> justin
135: >> 90: >> elizabet
136: >> 90: >> 1111
137: >> 89: >> november
138: >> 89: >> monkey12
139: >> 89: >> drowssap
140: >> 89: >> bubbles
141: >> 88: >> startrek
142: >> 88: >> diamond
143: >> 88: >> coffee
144: >> 88: >> butterfly
145: >> 88: >> brooklyn
146: >> 88: >> amanda
147: >> 88: >> adidas
148: >> 87: >> test
149: >> 86: >> sparky
150: >> 86: >> morgan
151: >> 86: >> merlin
152: >> 86: >> maverick
153: >> 86: >> elephant
154: >> 86: >> asdf1234
155: >> 86: >> Highlife
156: >> 85: >> wordpass
157: >> 85: >> poopoo
158: >> 85: >> nirvana
159: >> 85: >> love
160: >> 85: >> liverpoo
161: >> 85: >> lauren
162: >> 84: >> stupid
163: >> 84: >> chelsea
164: >> 83: >> compaq
165: >> 83: >> boomer
166: >> 82: >> yellow
167: >> 82: >> sophie
168: >> 82: >> q1w2e3r4
169: >> 82: >> coolness
170: >> 82: >> cocacola
171: >> 81: >> zxcvbnm
172: >> 81: >> fucker
173: >> 81: >> blink182
174: >> 80: >> snowball
175: >> 80: >> snoopy
176: >> 80: >> rachel
177: >> 80: >> gundam
178: >> 80: >> alexande
179: >> 79: >> jasmine
180: >> 79: >> danielle
181: >> 79: >> basketba
182: >> 79: >> 7777777
183: >> 78: >> thunder
184: >> 78: >> snickers
185: >> 78: >> patrick
186: >> 78: >> darkness
187: >> 78: >> boston
188: >> 78: >> abcd1234
189: >> 77: >> pumpkin
190: >> 77: >> creative
191: >> 77: >> 88888888
192: >> 76: >> smokey
193: >> 76: >> sample12
194: >> 76: >> godzilla
195: >> 76: >> december
196: >> 76: >> corvette
197: >> 76: >> bandit
198: >> 76: >> 123abc
199: >> 75: >> voodoo
200: >> 75: >> turtle
201: >> 75: >> spider
202: >> 75: >> london
203: >> 75: >> jonathan
204: >> 75: >> hello123
205: >> 75: >> hahaha
206: >> 75: >> chicago
207: >> 75: >> brandon
208: >> 75: >> austin
209: >> 74: >> tennis
210: >> 74: >> scooby
211: >> 74: >> naruto
212: >> 74: >> mercedes
213: >> 74: >> maxwell
214: >> 74: >> fluffy
215: >> 74: >> eagles
216: >> 74: >> 11111111
217: >> 73: >> penguin
218: >> 73: >> muffin
219: >> 73: >> bullshit
220: >> 72: >> jasper
221: >> 72: >> flower
222: >> 72: >> ferrari
223: >> 71: >> steelers
224: >> 71: >> slipknot
225: >> 71: >> pookie
226: >> 71: >> murphy
227: >> 71: >> joseph
228: >> 71: >> calvin
229: >> 71: >> apples
230: >> 71: >> 159753
231: >> 70: >> tucker
232: >> 70: >> martin
233: >> 70: >> 11235813
234: >> 69: >> whocares
235: >> 69: >> pineappl
236: >> 69: >> nicholas
237: >> 69: >> jackass
238: >> 69: >> goober
239: >> 69: >> chester
240: >> 69: >> 8675309
241: >> 69: >> 222222
242: >> 68: >> winston
243: >> 68: >> please
244: >> 68: >> dakota
245: >> 68: >> 112233
246: >> 67: >> wonkette
247: >> 67: >> somethin
248: >> 67: >> rosebud
249: >> 67: >> dallas
250: >> 67: >> 696969
251: >> 66: >> shithead
252: >> 66: >> popcorn
253: >> 66: >> peaches
254: >> 66: >> pakistan
255: >> 66: >> dexter
256: >> 66: >> canada
257: >> 65: >> victoria
258: >> 65: >> rockstar
259: >> 65: >> qwe123
260: >> 65: >> newyork
261: >> 65: >> nathan
262: >> 65: >> lovely
263: >> 65: >> forever
264: >> 65: >> benjamin
265: >> 64: >> robert
266: >> 64: >> pickle
267: >> 64: >> passport
268: >> 64: >> mother
269: >> 64: >> harley
270: >> 64: >> falcon
271: >> 63: >> trinity
272: >> 63: >> barney
273: >> 62: >> willow
274: >> 62: >> ncc1701
275: >> 62: >> kitten
276: >> 62: >> jesus
277: >> 62: >> hacker
278: >> 62: >> fuckyou2
279: >> 62: >> fender
280: >> 62: >> butter
281: >> 61: >> wolverin
282: >> 61: >> samsung
283: >> 61: >> rush2112
284: >> 61: >> pa55word
285: >> 61: >> lalala
286: >> 61: >> christin
287: >> 60: >> yourmom
288: >> 60: >> westside
289: >> 60: >> rocket
290: >> 60: >> melissa
291: >> 60: >> icecream
292: >> 60: >> casper
293: >> 59: >> spooky
294: >> 59: >> random
295: >> 59: >> prince
296: >> 59: >> mookie
297: >> 59: >> greenday
298: >> 59: >> cooper
299: >> 58: >> hello1
300: >> 58: >> guinness
301: >> 58: >> gamecube
302: >> 58: >> diablo
303: >> 58: >> arsenal
304: >> 58: >> 999999
305: >> 58: >> 98765432
306: >> 58: >> 333333
307: >> 58: >> 131313
308: >> 58: >> 00000000
309: >> 57: >> xbox360
310: >> 57: >> school
311: >> 57: >> iceman
312: >> 57: >> goldfish
313: >> 57: >> friends
314: >> 57: >> 555555
315: >> 56: >> winter
316: >> 56: >> welcome1
317: >> 56: >> qaz159
318: >> 56: >> porsche
319: >> 56: >> monkey1
320: >> 56: >> kermit
321: >> 56: >> jackie
322: >> 56: >> hardcore
323: >> 56: >> donkey
324: >> 55: >> success
325: >> 55: >> richard
326: >> 55: >> redrum
327: >> 55: >> rainbow
328: >> 55: >> poohbear
329: >> 55: >> jordan23
330: >> 55: >> heather
331: >> 55: >> fireball
332: >> 55: >> dietcoke
333: >> 55: >> access
334: >> 54: >> warcraft
335: >> 54: >> skippy
336: >> 54: >> ranger
337: >> 54: >> radiohea
338: >> 54: >> qwerty1
339: >> 54: >> qwer1234
340: >> 54: >> michael1
341: >> 54: >> drpepper
342: >> 54: >> destiny
343: >> 54: >> cowboy
344: >> 54: >> changeme
345: >> 53: >> xxxxxx
346: >> 53: >> slayer
347: >> 53: >> sierra
348: >> 53: >> rabbit
349: >> 53: >> panther
350: >> 53: >> mountain
351: >> 53: >> louise
352: >> 53: >> eminem
353: >> 53: >> carolina
354: >> 53: >> asdasd
355: >> 52: >> testing
356: >> 52: >> lakers
357: >> 52: >> kitty
358: >> 52: >> gemini
359: >> 52: >> gandalf
360: >> 52: >> dragonba
361: >> 52: >> brandy
362: >> 52: >> apple
363: >> 52: >> 1qazxsw2
364: >> 52: >> 123654
365: >> 51: >> pikachu
366: >> 51: >> miller
367: >> 51: >> maryjane
368: >> 51: >> lacrosse
369: >> 51: >> jessie
370: >> 51: >> hotdog
371: >> 51: >> helpme
372: >> 51: >> buddha
373: >> 51: >> angels
374: >> 50: >> test123
375: >> 50: >> supersta
376: >> 50: >> skywalke
377: >> 50: >> septembe
378: >> 50: >> ncc1701d
379: >> 50: >> money
380: >> 50: >> lollipop
381: >> 50: >> letmein1
382: >> 50: >> hammer
383: >> 50: >> dolphin
384: >> 50: >> digital
385: >> 50: >> cherry
386: >> 50: >> charlie1
387: >> 50: >> america
388: >> 49: >> wizard
389: >> 49: >> windows
390: >> 49: >> williams
391: >> 49: >> vegeta
392: >> 49: >> tigers
393: >> 49: >> spencer
394: >> 49: >> q1w2e3
395: >> 49: >> precious
396: >> 49: >> platinum
397: >> 49: >> online
398: >> 49: >> madonna
399: >> 49: >> johnny
400: >> 49: >> garfield
401: >> 49: >> einstein
402: >> 49: >> cassie
403: >> 49: >> andrea
404: >> 49: >> Passw0rd
405: >> 48: >> zombie
406: >> 48: >> spanky
407: >> 48: >> reggie
408: >> 48: >> pa55w0rd
409: >> 48: >> logitech
410: >> 48: >> liberty
411: >> 48: >> legend
412: >> 48: >> infinity
413: >> 48: >> indian
414: >> 48: >> green
415: >> 48: >> eclipse
416: >> 48: >> dilbert
417: >> 48: >> cowboys
418: >> 48: >> cartman
419: >> 48: >> californ
420: >> 48: >> boscoe01
421: >> 47: >> scarface
422: >> 47: >> rebecca
423: >> 47: >> microsof
424: >> 47: >> gracie
425: >> 47: >> family
426: >> 47: >> bulldog
427: >> 47: >> bond007
428: >> 47: >> bobafett
429: >> 47: >> 1234qwer
430: >> 46: >> warrior
431: >> 46: >> travis
432: >> 46: >> sunflowe
433: >> 46: >> stella
434: >> 46: >> spongebo
435: >> 46: >> shannon
436: >> 46: >> playstat
437: >> 46: >> montana
438: >> 46: >> jupiter
439: >> 46: >> junior
440: >> 46: >> james
441: >> 46: >> indigo
442: >> 46: >> iloveu
443: >> 46: >> happy
444: >> 46: >> dolphins
445: >> 46: >> catch22
446: >> 46: >> butthead
447: >> 46: >> baxter
448: >> 46: >> 0000
449: >> 45: >> tinkerbe
450: >> 45: >> therock
451: >> 45: >> suckit
452: >> 45: >> scoobydo
453: >> 45: >> rascal
454: >> 45: >> olivia
455: >> 45: >> norman
456: >> 45: >> golden
457: >> 45: >> fuckme
458: >> 45: >> franklin
459: >> 45: >> fantasy
460: >> 45: >> david
461: >> 45: >> courtney
462: >> 45: >> beatles
463: >> 45: >> alexandr
464: >> 45: >> 232323
465: >> 44: >> veronica
466: >> 44: >> starcraf
467: >> 44: >> shelby
468: >> 44: >> saturn
469: >> 44: >> sakura
470: >> 44: >> raiders
471: >> 44: >> mypasswo
472: >> 44: >> metalgea
473: >> 44: >> loveme
474: >> 44: >> lizard
475: >> 44: >> hummer
476: >> 44: >> giants
477: >> 44: >> charles
478: >> 44: >> caroline
479: >> 44: >> bubba
480: >> 44: >> bigdog
481: >> 44: >> 55555
482: >> 44: >> 12341234
483: >> 43: >> yamaha
484: >> 43: >> xavier
485: >> 43: >> virginia
486: >> 43: >> twilight
487: >> 43: >> stargate
488: >> 43: >> softball
489: >> 43: >> simple
490: >> 43: >> red123
491: >> 43: >> people
492: >> 43: >> m0nkey
493: >> 43: >> jamesbon
494: >> 43: >> inuyasha
495: >> 43: >> halflife
496: >> 43: >> friday
497: >> 43: >> deftones
498: >> 43: >> charlott
499: >> 43: >> blah
500: >> 43: >> arthur
501: >> 43: >> abcdefg
502: >> 43: >> P@ssw0rd
503: >> 42: >> sublime
504: >> 42: >> samson
505: >> 42: >> sabrina
506: >> 42: >> moose
507: >> 42: >> moocow
508: >> 42: >> monica
509: >> 42: >> lovers
510: >> 42: >> lovelove
511: >> 42: >> justice
512: >> 42: >> fuck
513: >> 42: >> enigma
514: >> 42: >> dreamcas
515: >> 42: >> crystal
516: >> 42: >> cooldude
517: >> 42: >> christop
518: >> 42: >> carmen
519: >> 42: >> cardinal
520: >> 42: >> buttercu
521: >> 42: >> blue
522: >> 42: >> asdfjkl
523: >> 42: >> american
524: >> 41: >> sydney
525: >> 41: >> patches
526: >> 41: >> megaman
527: >> 41: >> jeremy
528: >> 41: >> isabella
529: >> 41: >> happy1
530: >> 41: >> gizmo
531: >> 41: >> edward
532: >> 41: >> christia
533: >> 41: >> bob
534: >> 41: >> billybob
535: >> 41: >> bastard
536: >> 41: >> august
537: >> 41: >> abcdef
538: >> 41: >> a123456
539: >> 41: >> 987654
540: >> 41: >> 444444
541: >> 40: >> steven
542: >> 40: >> pass1234
543: >> 40: >> pass
544: >> 40: >> p4ssw0rd
545: >> 40: >> mitchell
546: >> 40: >> kittycat
547: >> 40: >> ireland
548: >> 40: >> hobbes
549: >> 40: >> goddess
550: >> 40: >> genius
551: >> 40: >> fuckyou1
552: >> 40: >> dude
553: >> 40: >> cupcake
554: >> 40: >> comment
555: >> 40: >> champion
556: >> 40: >> awesome
557: >> 40: >> abcdefgh
558: >> 39: >> zzzzzz
559: >> 39: >> zxcvbn
560: >> 39: >> testtest
561: >> 39: >> tacobell
562: >> 39: >> superfly
563: >> 39: >> skittles
564: >> 39: >> serenity
565: >> 39: >> savannah
566: >> 39: >> redskins
567: >> 39: >> pirate
568: >> 39: >> pickles
569: >> 39: >> phantom
570: >> 39: >> pearljam
571: >> 39: >> parker
572: >> 39: >> paradise
573: >> 39: >> none
574: >> 39: >> natalie
575: >> 39: >> jesus1
576: >> 39: >> jellybea
577: >> 39: >> ihateyou
578: >> 39: >> danger
579: >> 39: >> chicken1
580: >> 39: >> cameron
581: >> 39: >> beavis
582: >> 39: >> asd123
583: >> 39: >> alexis
584: >> 39: >> a1234567
585: >> 39: >> 777777
586: >> 38: >> winnie
587: >> 38: >> winner
588: >> 38: >> weezer
589: >> 38: >> tweety
590: >> 38: >> timosha
591: >> 38: >> skater
592: >> 38: >> shorty
593: >> 38: >> scorpio
594: >> 38: >> redwings
595: >> 38: >> rangers
596: >> 38: >> ragnarok
597: >> 38: >> packers
598: >> 38: >> moomoo
599: >> 38: >> michigan
600: >> 38: >> mercury
601: >> 38: >> marshall
602: >> 38: >> marlboro
603: >> 38: >> magic
604: >> 38: >> lasvegas
605: >> 38: >> kenshin
606: >> 38: >> idontkno
607: >> 38: >> hollywoo
608: >> 38: >> firebird
609: >> 38: >> element
610: >> 38: >> dickhead
611: >> 38: >> copper
612: >> 38: >> cool
613: >> 38: >> chickens
614: >> 37: >> zeppelin
615: >> 37: >> yousuck
616: >> 37: >> wombat
617: >> 37: >> vanessa
618: >> 37: >> valentin
619: >> 37: >> tiger
620: >> 37: >> tester
621: >> 37: >> stinky
622: >> 37: >> spitfire
623: >> 37: >> sammy
624: >> 37: >> qqqqqq
625: >> 37: >> passion
626: >> 37: >> nelson
627: >> 37: >> nascar
628: >> 37: >> mexico
629: >> 37: >> meowmeow
630: >> 37: >> loser
631: >> 37: >> knight
632: >> 37: >> kimberly
633: >> 37: >> killa01
634: >> 37: >> iphone
635: >> 37: >> genesis
636: >> 37: >> enterpri
637: >> 37: >> domino
638: >> 37: >> darkside
639: >> 37: >> cricket
640: >> 37: >> chichi
641: >> 37: >> bulldogs
642: >> 36: >> yahoo
643: >> 36: >> willie
644: >> 36: >> stephani
645: >> 36: >> sandman
646: >> 36: >> okies
647: >> 36: >> margaret
648: >> 36: >> lolita
649: >> 36: >> hotmail
650: >> 36: >> heaven
651: >> 36: >> goblue
652: >> 36: >> flowers
653: >> 36: >> duncan
654: >> 36: >> dennis
655: >> 36: >> cracker
656: >> 36: >> cookies
657: >> 36: >> chance
658: >> 36: >> athena
659: >> 36: >> anderson
660: >> 36: >> 888888
661: >> 36: >> 11111
662: >> 35: >> tyler
663: >> 35: >> theone
664: >> 35: >> theman
665: >> 35: >> stimpy
666: >> 35: >> qwaszx
667: >> 35: >> pass123
668: >> 35: >> orlando
669: >> 35: >> mozart
670: >> 35: >> maddie
671: >> 35: >> longhorn
672: >> 35: >> lightnin
673: >> 35: >> ladybug
674: >> 35: >> kathleen
675: >> 35: >> hellokit
676: >> 35: >> hellfire
677: >> 35: >> gibson
678: >> 35: >> froggy
679: >> 35: >> freddy
680: >> 35: >> florida
681: >> 35: >> discover
682: >> 35: >> colorado
683: >> 35: >> carter
684: >> 35: >> brutus
685: >> 35: >> blowme
686: >> 35: >> bitch
687: >> 35: >> asdf123
688: >> 35: >> angela
689: >> 35: >> 87654321
690: >> 35: >> 101010
691: >> 34: >> walter
692: >> 34: >> vision
693: >> 34: >> toyota
694: >> 34: >> sterling
695: >> 34: >> speedy
696: >> 34: >> smiley
697: >> 34: >> skyline
698: >> 34: >> qazwsxed
699: >> 34: >> psycho
700: >> 34: >> pavilion
701: >> 34: >> oicu812
702: >> 34: >> october
703: >> 34: >> marley
704: >> 34: >> kramer
705: >> 34: >> johnson
706: >> 34: >> jester
707: >> 34: >> hithere
708: >> 34: >> fuckthis
709: >> 34: >> frankie
710: >> 34: >> engineer
711: >> 34: >> empire
712: >> 34: >> electric
713: >> 34: >> dancer
714: >> 34: >> daisy
715: >> 34: >> cificap
716: >> 34: >> chandler
717: >> 34: >> bollocks
718: >> 34: >> atlantis
719: >> 33: >> zaq12wsx
720: >> 33: >> yomama
721: >> 33: >> wutang
722: >> 33: >> wicked
723: >> 33: >> trixie
724: >> 33: >> southpar
725: >> 33: >> shamrock
726: >> 33: >> reddog
727: >> 33: >> punkrock
728: >> 33: >> player
729: >> 33: >> picard
730: >> 33: >> nissan
731: >> 33: >> matthew1
732: >> 33: >> manchest
733: >> 33: >> hottie
734: >> 33: >> freedom1
735: >> 33: >> disney
736: >> 33: >> coolio
737: >> 33: >> claire
738: >> 33: >> camaro
739: >> 33: >> buttons
740: >> 33: >> blabla
741: >> 33: >> 123456a
742: >> 32: >> wildcats
743: >> 32: >> voyager
744: >> 32: >> vampire
745: >> 32: >> ultimate
746: >> 32: >> trunks
747: >> 32: >> timothy
748: >> 32: >> system
749: >> 32: >> stephen
750: >> 32: >> sexy
751: >> 32: >> sesame
752: >> 32: >> samuel
753: >> 32: >> qweasd
754: >> 32: >> pyramid
755: >> 32: >> power
756: >> 32: >> poopie
757: >> 32: >> police
758: >> 32: >> playboy
759: >> 32: >> phoebe
760: >> 32: >> peewee
761: >> 32: >> peekaboo
762: >> 32: >> pandora
763: >> 32: >> loveyou
764: >> 32: >> jaguar
765: >> 32: >> indiana
766: >> 32: >> harrison
767: >> 32: >> groovy
768: >> 32: >> gawker1
769: >> 32: >> fuckit
770: >> 32: >> doodle
771: >> 32: >> burton
772: >> 32: >> boogie
773: >> 32: >> bonnie
774: >> 32: >> beagle
775: >> 32: >> barcelon
776: >> 32: >> barbie
777: >> 32: >> bambam
778: >> 32: >> albert
779: >> 32: >> PASSWORD
780: >> 32: >> 147258
781: >> 31: >> wallace
782: >> 31: >> thuglife
783: >> 31: >> tanner
784: >> 31: >> swimming
785: >> 31: >> starbuck
786: >> 31: >> spike
787: >> 31: >> smiles
788: >> 31: >> scotland
789: >> 31: >> scorpion
790: >> 31: >> sapphire
791: >> 31: >> raptor
792: >> 31: >> porsche9
793: >> 31: >> peace
794: >> 31: >> okokok
795: >> 31: >> mynameis
796: >> 31: >> mushroom
797: >> 31: >> montreal
798: >> 31: >> monday
799: >> 31: >> molly
800: >> 31: >> mississi
801: >> 31: >> megatron
802: >> 31: >> maximus
803: >> 31: >> maddog
804: >> 31: >> lucky
805: >> 31: >> jessica1
806: >> 31: >> jarvis
807: >> 31: >> insane
808: >> 31: >> hitman
809: >> 31: >> hamlet
810: >> 31: >> hamilton
811: >> 31: >> gordon
812: >> 31: >> gabriel
813: >> 31: >> francis
814: >> 31: >> fleshbot
815: >> 31: >> finalfan
816: >> 31: >> explorer
817: >> 31: >> evangeli
818: >> 31: >> eagle1
819: >> 31: >> dreams
820: >> 31: >> dingdong
821: >> 31: >> debbie
822: >> 31: >> chris
823: >> 31: >> chipper
824: >> 31: >> brooke
825: >> 31: >> brittany
826: >> 31: >> bigdaddy
827: >> 31: >> angel
828: >> 31: >> amazon
829: >> 31: >> allison
830: >> 31: >> aardvark
831: >> 31: >> 11223344
832: >> 30: >> zachary
833: >> 30: >> watermel
834: >> 30: >> victor
835: >> 30: >> veritas
836: >> 30: >> unicorn
837: >> 30: >> sweetie
838: >> 30: >> starfish
839: >> 30: >> squirrel
840: >> 30: >> shit
841: >> 30: >> satan666
842: >> 30: >> sarah
843: >> 30: >> runner
844: >> 30: >> rockon
845: >> 30: >> redhead
846: >> 30: >> predator
847: >> 30: >> pooppoop
848: >> 30: >> personal
849: >> 30: >> patriots
850: >> 30: >> newlife
851: >> 30: >> mookie12
852: >> 30: >> minnie
853: >> 30: >> metroid
854: >> 30: >> lucky1
855: >> 30: >> krishna
856: >> 30: >> immortal
857: >> 30: >> homer
858: >> 30: >> highland
859: >> 30: >> gogogo
860: >> 30: >> friend
861: >> 30: >> fred
862: >> 30: >> firefly
863: >> 30: >> elvis
864: >> 30: >> connor
865: >> 30: >> christ
866: >> 30: >> cherokee
867: >> 30: >> catherin
868: >> 30: >> bunghole
869: >> 30: >> brazil
870: >> 30: >> blizzard
871: >> 30: >> bigboy
872: >> 30: >> alaska
873: >> 30: >> 789456
874: >> 30: >> 420420
875: >> 30: >> 1passwor
876: >> 30: >> 12qwaszx
877: >> 30: >> 1234abcd
878: >> 30: >> 102030
879: >> 29: >> writer
880: >> 29: >> wookie
881: >> 29: >> wolfpack
882: >> 29: >> wilson
883: >> 29: >> william1
884: >> 29: >> trouble
885: >> 29: >> toshiba
886: >> 29: >> thursday
887: >> 29: >> teddybea
888: >> 29: >> techno
889: >> 29: >> star
890: >> 29: >> skipper
891: >> 29: >> sephirot
892: >> 29: >> revoluti
893: >> 29: >> potter
894: >> 29: >> pokemon1
895: >> 29: >> pizza
896: >> 29: >> penguins
897: >> 29: >> pencil
898: >> 29: >> passwerd
899: >> 29: >> p@ssw0rd
900: >> 29: >> noodle
901: >> 29: >> music
902: >> 29: >> moonligh
903: >> 29: >> mongoose
904: >> 29: >> millie
905: >> 29: >> marvin
906: >> 29: >> justdoit
907: >> 29: >> hi
908: >> 29: >> hershey
909: >> 29: >> garcia
910: >> 29: >> future
911: >> 29: >> esther
912: >> 29: >> darkstar
913: >> 29: >> dammit
914: >> 29: >> christma
915: >> 29: >> buffalo
916: >> 29: >> buddy
917: >> 29: >> bobbob
918: >> 29: >> asdfg
919: >> 29: >> angel1
920: >> 29: >> alex
921: >> 29: >> adrian
922: >> 28: >> wolfgang
923: >> 28: >> wingzero
924: >> 28: >> weasel
925: >> 28: >> wanker
926: >> 28: >> vincent
927: >> 28: >> vanilla
928: >> 28: >> test1234
929: >> 28: >> stanley
930: >> 28: >> spirit
931: >> 28: >> spartan
932: >> 28: >> snapple
933: >> 28: >> scarlett
934: >> 28: >> renegade
935: >> 28: >> pimpin
936: >> 28: >> perfect
937: >> 28: >> patricia
938: >> 28: >> pamela
939: >> 28: >> packard
940: >> 28: >> ou812
941: >> 28: >> opensesa
942: >> 28: >> noodles
943: >> 28: >> nigger
944: >> 28: >> morrison
945: >> 28: >> magnolia
946: >> 28: >> loverboy
947: >> 28: >> laptop
948: >> 28: >> kingkong
949: >> 28: >> keyboard
950: >> 28: >> katherin
951: >> 28: >> john
952: >> 28: >> insecure
953: >> 28: >> grendel
954: >> 28: >> golfer
955: >> 28: >> gizmodo2
956: >> 28: >> fossil
957: >> 28: >> flamingo
958: >> 28: >> eugene
959: >> 28: >> eatshit
960: >> 28: >> download
961: >> 28: >> doctor
962: >> 28: >> crimson
963: >> 28: >> coltrane
964: >> 28: >> carpedie
965: >> 28: >> captain
966: >> 28: >> boomboom
967: >> 28: >> blessed
968: >> 28: >> biscuit
969: >> 28: >> babydoll
970: >> 28: >> aurora
971: >> 28: >> audrey
972: >> 28: >> assassin
973: >> 28: >> animal
974: >> 28: >> 321321
975: >> 28: >> 314159
976: >> 28: >> 1212
977: >> 28: >> 09876543
978: >> 28: >> 007007
979: >> 27: >> tristan
980: >> 27: >> thumper
981: >> 27: >> sweetpea
982: >> 27: >> spartan1
983: >> 27: >> socrates
984: >> 27: >> sniper
985: >> 27: >> shalom
986: >> 27: >> shadow1
987: >> 27: >> sebastia
988: >> 27: >> rootbeer
989: >> 27: >> roland
990: >> 27: >> potato
991: >> 27: >> piglet
992: >> 27: >> number1
993: >> 27: >> nugget
994: >> 27: >> nightmar
995: >> 27: >> monkeys
996: >> 27: >> masamune
997: >> 27: >> marcus
998: >> 27: >> lucifer
999: >> 27: >> leslie
1000: >> 27: >> lawrence

Create a Real Password! You Dummy!

2010-11-13T15:15:00.014-05:00

Here we go again...

Some time ago, TJMAXX companies woke up with a hangover: 130 Milion Credit Card number stolen. The Reason? Obsolete security!
Then, The Hotmail hack and the Rockyou list: 32 million users passwords stolen

As it was not enough, some genius of CEO is using obsolete technology to protect your data.
Please Welcome Nick Denton, (Gawker media) in due course for the Dummy Award of the year.

At the light of the Gawker Hack, one could think that the CEO of an internet media company would be a bit more enlighten than my grandmother when it comes to passwords & internet security, Huh?
Well, guess what? nope!
So, dear Nick Denton, CEO of Gawker.com, You are one of a hell of a dummy!

The Gawker Network was hacked, compromised, owned, and pawned! Releasing a database of 1,300,000 users, as well as their source code and another bunch of juicy stuff! On the top of that, most users names & emails were also published with the corresponding hash. John The Ripper ripped through the hashes with amazing ease...

The Main Issue?
-Money!
To probably save few bucks, Gawker never updated the level of security: They used DES to encrypt your data. DES is broken, obsolete and should not be used: After all, it's only 34 years old.

Using DES was only the tip of the iceberg: after few days of digging into the Gawker Hack, it appears that:

"They" were aware that something was wrong, but as it only concerned "peasants" it was not a top priority. The word "peasants" seems to be a code name for you, users of Gawker.
They taunted and provoked few people on the 4chan board. As a tip, I would suggest Gawker not to taunt people that seems to know much more about computers than you do.
The hack or infiltration seems to have been on for at least 4 months before the panic mode was set "on"
Gawker was alerted when the front page of the site displayed some very weird stuff, including links to the full source code(!)

That didn't come as a surprise to HD Moore, chief security officer at Rapid7.
"The DES crypt hash can be broken with ridiculous ease," said Moore in an e-mail reply to questions late Monday about the strength of the encryption used by Gawker to safeguard its users' passwords. "John the Ripper, along with most other tools, are well-equipped to brute-force these."
Moore pointed out that the 56-bit DES (Data Encryption Standard) encryption used by Gawker had been broken more than a decade ago, when the Deep Crack machine built by the Electronic Frontier Foundation (EFF) won a 1998 contest sponsored by RSA after breaking a DES key in just 56 hours. Six months later, EFF and distributed.net collaborated to lower that time to just over 22 hours.
"These days, [graphics processor unit]-based cracking makes this even easier," noted Moore.
computerworld.com Dec 2010

So thank you Gawker for putting my security so low ...

From the Gawker Hack, by Gnosis.

"Let's start with our good friend Nick!
You would think someone like Nick Denton who likes to run his mouth and taunts such an unforgiving mass like Anonymous, would use a more secure password than "24862486".
The sad thing is he probably believes this password is "secure" because he likes to use it everywhere! " Gnosis Hack Group

Gnosis goes on and publish in clear multiple accounts of the above named dummy.

Nick Denton and his crew taunted that group of hacker, and bragged a little bit too much.
You can brag Nick, but when you do so, you need to have ~at least~ some knowledge of what does what.

Gawker.com assured their users, shortly after that the Hack was publicly available (mind you) that:

"We'll continue to look into this, but as I commented on your site earlier, we have no evidence that any of our readers' user accounts/passwords have been compromised. They are not stored in plain text and are on entirely different systems than the third-party hosted Campfire screenshots that appear in this article.
There's no evidence to suggest any Gawker Network user accounts were compromised, and passwords are encrypted (not stored in plain text) anyway, so stealing passwords isn't even possible."

- Well done Scott!
The 200,000 accounts cracked so far are probably just an illusion:

"After gaining access to gawkers MySQL database we stumble upon a huge
table containing ~1,500,000 users. After a few days of dumping we
decided that 1.3 million was enough.

Gawker uses a really outdated hashing algorithm known as DES (Data Encryption Standard). Because DES has a maximum of 8chars using a password like "abcdefgh1234" only the first 8 characters "abcdefgh" are encrypted and stored in the database. If your
password is longer than 8 characters you only need to enter the first 8 characters
to log in! "

The main issue here is 1.3 million users login, emails and password in the wild. Not too bad for something that was "not even possible"

"Gawker uses DES to obfuscate your password, which is pretty much worthless. With an application of supercomputing power, the plaintext passwords could be revealed very quickly for all 1.3 million usernames." Jed Smith, Dec 2010

The second main issue is that most of those people are using the same password for a lot of things. I hope that Gawker users are using different email accounts:
Gnosis was taunted by Nick Denton, making them prove their point (And they did so deep that Nick must have a headache that originated from his rectum. No lube used.)
But at least, Gnosis are not that bad, gray-hish hackers: They published the all shebang, including source code, database, etc but they did not used it to hack people.
It would have been a massacre if they had phished the entire db without publishing it first.
That list was subsequently hacked and some of the Twitter Accounts linked started to see spam appear.

On the top of showing their absolute ignorance to the world, and being pawned, owned, covered with shame by a group of "script kids" Gawker.com had the great idea to advise their subscriber, after the hack, to use strong password. What an irony, specialy when we look at the great password of their CEO. with this fantastic article on how to create a great password.

Gina Trapany lately said something that I applause, in regards to the Gawker hack:

So, you read that! huh? , No readable words found in a dictionary !!!!

Well... if you look at the database of cracked password, you'll note that almost all passwords cracked where composed of:

Only numbers (Yes Nick Denton, slap yourself here)
Only letters (Yes, Gina Trapani, your advice is bad)
Used the email as password (Great Job! about 27% of the list....)
Were short
And finally, almost none used a sign, confirmed by Duo Security:

"Duo Security uncovered other interesting tidbits during its analysis, including the fact that nearly all of the cracked passwords — 99.45% — were composed of alphanumeric characters only, and did not contain any special characters or symbols."

Why? Ok, then I am going to repeat again....

If you use numbers only, you have 10 possibilities per character: 0,1,...8,9
When your password is 3 characters long, and made only of numbers.., that's 1,000 possibilities and roughly 0.001 sec "resistance time"
The Great Nick Denton had a password able to resist a bruteforce attack for less than an hour.
Now, if he had used a single sign, i.e "&" the possibilities would have jumped from 9^10 to 9^127 or 8,594,754,748,609,400,000 compared to a mere 1,000,000,000
Adding a sign would have made it 8,594,754,749 times more difficult to crack (that's 8.5 billion)

Password?
I DO NOT LIKE THE WORD "PASSWORD"
Password makes people use "words", and it implies that it is a "single" string.
Hence, when you ask people to generate a password, they do! they create one single word!

Think passphrase instead!
One of the good point of the article of Gina Trapani is the mention of an simple way to generate multiple and easy to remember password. ~~Password~~ Dang! Passphrase

As for the rest, here are my 2 cents:

If you can find it in a dictionary, it's not good!
Minimum 10ch long. 15 is highly regarded
Have you considered a space?
Use Lower cap and UPPER cap, along with Signs and Numbers
Did you know that you can use accented latin characters? é å ü (e-option-e)
Can't remember a string of signs? Use numbers with the shift key: 1234 = !@#$

Example: Use the birth day of your mom, i.e 1960-09, and type it with the Shift Key "on"
You'll get "!(^)_)("
so, any type of password such as "1960 Mommé!(^)_)(" will keep any hacker occupied for a while.
Add a "dot"+website, and "1960 Mommé!(^)_)(.gmail" is becoming seriously stupid strong.

So, using a phrase, that include the above mentioned tips and a solely 10 ch long Passphrase will generate 1,091,533,853,073,390,000,000 possible combination.
That number simply means that if you were to give each person on planet earth a computer able to crack 1 Billion keys per second, you'll still need about 78 years to crack it.
Make it 11 Ch long and it goes to 9,000 years.

One key factor to understand, is the famous "Faster than the bear" logic.

Imagine an hungry grizzly running after a group of people: somebody is going to be eaten!

Most people believe that to escape a Grizzly bear, you need to be faster than the bear.
Logic dictates that in order to NOT be eaten by the bear, you simply need to be faster than the slowest guy: He'll be the one being eaten by the bear.

The same theory applies with your passwords: If a hacker tries to crack your password, and can not succeed in a timely manner, he will most likely attack the next weak one.
You just need to be faster than the slowest guy....

One Last Thing:
Gawker hack or not, you should not use a "good" email account to post comments, play games, tweet or facebook: use disposable email or reserve some addresses for the "junk"

If one is compromised, it will not compromise the good stuff: Keep ham and spam separated.

lil recap:

Numbers only:                         10 per Ch.
Letters, lower case                   26 per Ch.
Letter, lower and upper case    52 per Ch
Numbers + Letters                   62 per Ch
Numbers + Letters + Shift 74 per Ch    !@#$%^&*()_+
Printable Characters                127 per Ch   0123...abc..ABC..!@#$%
Full ASCII                               255 per Ch   (including "space")

If you want to learn more, I highly suggest to read one of the following.
I highly recommend "Hacking Wireless Exposed"

Best Value Antivirus For Mac?

2010-11-04T15:19:00.002-04:00

Antivirus For Mac : The Scary Results

Why An AntiVirus For Mac?

What Is The Best Value Antivirus For Mac? Get all the Facts, Tests and Sometimes SCARY bugs From this "brother" blog

http://kismaxx.blogspot.com

Good Reading, Stay Safe...

Excerpt:

" .....Here comes the surprise

ClamXav was unable to detect a downloaded infected file, either .com or .zip or to find a threat in a disk image"

....It also deleted an entire iPhoto Library for a single file infected: 1 file infected, deleted 19,000 files. Best to Avoid, Stay away from it...."

... " iAntiVirus, Intego and Norton were choked by a 49 KB (KiloBytes, not MB or GB) file "

KisMAC Deep Digging: WPA Challenge Received

2010-10-01T18:42:00.004-04:00

I am under attack?
Is Someone Trying to Break Into my Network or Crack My Password?

WPA Challenge Received
ATTENTION! Received deauthentication frame. You might want to check for other WiFi people

This Topic is For Advanced KisMAC users. The Reading and Understanding of KisMAC basics are a prerequisite.

The message "WPA Challenge Received" displayed if you have Growl installed,

The other message "ATTENTION! Received deauthentication frame. You might want to check for other WiFi people" is the warning message on the Console log.

Both are telling you one thing: During the scanning, a WPA Challenge was received: Deauthentication frames were sent in order to force an AP to give a response and capture the necessary 4-way EAPOL handshakes to start an "audit" of the WPA network key.

I am under attack? Is someone trying to break into my Network or Crack My Password?

Not necessarily, Deauthentication Frames are broadcast with KisMAC in two ways:

Direct Attack against a defined SSID (Deauthenticate)
Broad Attack against all Networks (Deauthenticate All Networks) (within the same channel)

There is no sure way with KisMAC to be 100% sure that a Deauthentication attack is directed DIRECTLY against you; Only few hints.

Hints:

You have Channel hopping "OFF" and you are monitoring a single channel. i.e 6
You are monitoring your own channel. i.e 6
You are the sole AP on this precise Channel number. All other AP's are on different channels

When ALL of those conditions are there, you could be fairly certain that somebody is playing with your Network.

To the contrary, if you have Channel hopping enabled, you are listening to multiple Channels and can not be sure that it was directed against you.

What is a "Deauthenticate attack"?

No need to re-invent the wheel, here it is:
Excerpt from 802.11 standard, 802.11-2007 © IEEE

"... 5.4.3.2 Deauthentication
The deauthentication service is invoked when an existing Open System or Shared Key authentication is to be terminated. Deauthentication is an SS.

In an ESS, because authentication is a prerequisite for association, the act of deauthentication shall cause the STA to be disassociated. The deauthentication service may be invoked by either authenticated party (non-AP STA or AP). Deauthentication is not a request; it is a notification. Deauthentication shall not be refused by either party. When an AP sends a deauthentication notice to an associated STA, the association shall also be terminated."

© IEEE , all rights reserved.
Source: http://standards.ieee.org/

In Plain English, it explains that a Deauthentication attack is kinda like a Denial of Service Attack (DoS). KisMAC spoofed packets force (Flood) an AP with authentication frames and creates a series of tries to force the AP to respond. Those response are then captured (handshakes)
Deauthentication is very effective at revealing a hidden SSID (De-Cloaking) or capturing 4-way EAPOL handshake.

Deauthentication is an active attack, hence when performed you will leave the comfort and stealth of Monitor Mode. You'll go from solely listening to screaming. Hence, you can be revealed.

How Can I Tell if I am Under Attack?

3 ways: From simple to not that simple

Console
(Console.app in Applications Utilities >> Console)

If you use Console.app , it's more General Messages and you have to look into Console Messages, it does not pop up on your screen
You have to look for the message "ATTENTION! Received deauthentication frame. You might want to check for other WiFi people" AND it does not gives you the guarantee that you are a target. Solely the fact that a Challenge was broadcast.
A second type of message form Console log is a bit more precise : "KisMAC[14891] Detected WPA challenge for 00:xx:xx:xx:B7:61!"
In this case, we can clearly see that the BSSID xxxxB7:61 was the target. If you are xxxxB7:61 Then it's fairly clear that you are under attack. Still, you can not guess who sent you those Deauthentication frames...

Growl
Beside the fact that I highly recommend Growl, Growl notifications can give you a hint on the fact that, if your screen is filled with notifications, there is a good chance that the attack is against you. Or fairly close. Let's say that "they" are aiming in your direction....
On the other side, if you see a "WPA Challenge received" every 2 minutes, there is a chance that one SSID is trying to play with another one, and you are in the middle and just hear the conversation.
Just look at the message, take note of the MAC Address and BSSID , and search around you...

Multiple Growl Notifications

Possible Attack against a single channel (you!)
In some case, you'll receive so many notifications that you will have to stop Growl.
Console Log Message: "Could not display Growl notification; no screen space available" is a hint that you have just received a bucket of Deauthentication frames.
it's hard to miss such a hint....
KisMAC sends a Deauthentication frame every 100 ms by default, hence 10 per second, this is why it can flood Growl fairly easily.

The Big Gun ....

If you really want to know if it was directed against you, you'll need to take out the "Big Gun"
On the Preference Pane >> Driver >> the box "keep everything" was of course, checked.
On the same pane, you have noted that the file(s) were saved as ~/DumpLog %y-%m-%d %H:%M

Note: The Decrypt PCAP Dump Feature on KisMAC 0.3 has a bug (TKT #371) in order to use that feature you have to return to KisMAC 0.2.99. The Dump Filter works on 0.3

Ok ?
Then Go to your ~ folder and locate that DumpLog.
Take a deep breath.... and ...

And.... be ready to Download WireShark from a trusted source*

WireShark

Is the "World Foremost Network Analyzer"
Is something that will pull the guts out of any packets, frames or anything that was send via airwaves.
Is NOT for beginners
Is NOT User Friendly unless you know what you do.

Read the Wiki, Documentation and FAQ.
Read Again, or Watch the Videos
Open your Dumplog File with WireShark
select proper filters and expressions... click apply .... and discover ...

Then, you'll see that the attack was not directed against you, for sure.
The source of the Deauthentication was a Cisco AP BSSID xxxxx:83 and the target another Cisco AP BSSID xxxx:61

More details ...

You can now save that file, return to KisMAC , and find who's playing ...
Plug your directional antenna , and you'll get a direction
Plug your GPS, lock on the SSID and you'll find who's playing with you.
If you don't have a GPS, here is a good one for ~$30, working with KisMAC. It's on the RIGHT side, under "I recommend"

Decrypting Packets

In order to decrypt packets, you'll need the Network Key. In Wireshark, you can plug up to 7 keys. Assuming that you have a capture file (DumpLog, PCAP or CAP) , Open Wireshark, and open your capture file.
Go to Edit >> Preferences >> Protocols
Then select IEEE 802.11 and on the right, enter up to 7 network keys.
Note: You HAVE TO check the box "Enable decryption"

Notes:

* WireShark should be downloaded only from trusted sources, Links here as well as other trusted and tasty wifi downloads

There is a piece of Malware called "WireShark Antivirus" that is NOT related to WireShark. it's a fake Antivirus for Windows
In case of doubt:
a) You have a Mac, and not Windozes
b) Google before Install
c) Use an Antivirus on your Mac too! Some very good ones are Free for Mac

WARNING!!! Received a Probe flood from xx:xx:xx:xx:2E:BC. This usually means that this computer uses a cheap stumbler such as iStumbler, Macstumbler or Netstumbler!

4-way EAPOL handshake

KisMAC Dumplog

KisMAC PCAP File

KisMAC

KisMAC GPS feature

DropBox Is So Cooool

2010-04-01T14:43:00.007-04:00

DropBox: Put your Mac in the cloud

Warning! DropBox is so cool that it should be considered as a "Controlled Substance". Be careful: once you start, you can't stop using it
So, download it now, and while it's doing it, read along ....

DropBox is not your average online backup / exchange

DropBox provides a worry free, super-smart , super-easy way of sharing very large files in no time. DropBox is free for up to 10GB.
To fully grasp all you can do with Dropbox, read also all the tricks and perks that Dropbox provides

Why Dropbox?
A) it's Free , you start at 2GB and can go up to 10GB . (Yes, that's 10,000 MB) for FREE.
B) it's Smart:

Undo and Undelete. 30 days
Public or Private Folders, Secured
Folder or Files Exchange, very fast !

C) It's dead easy, it works like a Directory on your computer , just drag and drop

D) It's Wicked Smaht: (Insert here Boston Accent)

When a change is made, it keep a backup copy AND only upload what was changed: That makes it super fast and dummy proof: I have uploaded new versions of a 300MB file in less than 15 seconds !

E)
You can also use Dropbox to:

F)
It's secured by a AES-256 Encryption. Kinda serious stuff. In fact AES-256 is so serious, that it is virtually UNcrackable

What's really good with it, is the perfect sync with your Mac:
Let's take the example with Cu3er, the UberCool flash slider on the top of this blog.
Anytime you make a change on a picture, you need to save, upload the new file with an FTP, etc etc, and probably keep a copy of the previous file (Backup , etc )
With DropBox, I open the file , make a change, and save. that's it. The sync is automatic.
Not only it's super fast, but also, for a dummy like me, super safe: I can go back up to 30 days and get correct any mistakes or recup any file changes, Plus I do not have to rename files to keep previous versions....

And Finally... I suppose that you are aware of the fact that BlogSpot does not allow you to store files on Blogspot. Well, with DropBox, the issue is resolved. Just a link and you are good to go. Any file. (Be careful here: .exe , .dmg and friends are to be scanned thoroughly) Example here , a pic of the Great City of Boston or my Famous recipe of Cod a la Bordelaise, tested and approved by the two most feared food expert of the Greater Boston Area

Not convinced? Try it, You'll love it. Did I mention that it's free? (I am talking about DropBox), The fish recipe is guaranteed to work too.

So , use this link and you'll get an extra 250MB on the top of the 2GB. Yes, that's a referral.

If you do wish to use it, feel free to visit DropBox by yourself

Here is a copy of their FAQ

Dropbox replaces:

Emailing file attachments to yourself and other people
Using USB drives to move files between computers
Renaming files to keep a history of previous versions
Complicated backup software and hardware
And more!

https://www.dropbox.com/features

Clean My Mac No Serial

2010-03-28T12:18:00.015-04:00

CleanMyMac No Serial Needed

Ok ! Don't get all hyped, this is not a crack, just a way to work around the limitation of Clean My Mac "Demo"

First, What is Clean My Mac?
As per the developer "CleanMyMac represents sophisticated all-in-one-suite utility that helps keep your Mac clean and healthy.

With just two simple clicks you can delete useless files that basically pile up and waste your valuable disk space. CleanMyMac allows enjoying smooth system performance combining such vital features as Slim Universal Binaries, Clean Unneeded Languages, Logs Rotation, Clean Caches, Quick and Secure Erase, Application Uninstallation, and Killing Trash Left From Buried Applications."

It's great, but I find, -in my personal opinion- the App a little bit overpriced.

Nevertheless, it can help you in many ways. So, I will enjoy the Demo Version. But it's limited in the amount that you can clean. Hence the "Demo"

To work around the limitation, you just need an other App called App Cleaner , that you can find here.
Once App Cleaner is installed, download the last version of CleanMyMac from the trusted Apple Download Page
Run Clean my Mac, And Clean what you need.
As a Word Of Caution: Clean the least sensitive first : Unused languages, Trash , etc ...
When you reach the 209.72 MB limitation , Quit Clean My Mac and Uninstall it with App cleaner: it will also remove the plists and any files associated with Clean My Mac

Then Re-install. That's it! re start the process from scratch

If the re-install - uninstall is too much for you, there is the solution to edit the plist, here (advanced users)

It will take you 3 or 4 un-install - re-install to make a deep clean, but it's almost worth it.
The "only" issue is that you can not clean files bigger than 209.72. I was very surprised to see my Google Earth Cache File being 650 MB !

In that case, work around one more time: Go into Google Earth Preferences, Select Cache and clear. If not working Un-install Google Earth with App Cleaner , then re-install again. Not very high tech, but working.

NOTE
Be very careful with the option of Universal Binary: "Sophisticated" applications will self check their integrity to avoid pirated versions. If the Checksum is not correct, they will stop working. Clean My Mac works around the issue by publishing a list of "don't touch me" applications called "Ignore List"
Go to Preferences and be sure to hit "update"

As a rule of thumb, if the app was NOT a freeware, I would be careful i.e. Microsoft, Adobe, Apple, etc .
Start with freeware that you can easily re-install if an issue arise.

Universal Binaries explained, According to Clean My Mac:

KisMAC Wordlist and Dictionary Files

2010-01-24T08:43:00.015-05:00

Wordlists
Dictionary Files
Wordlists Generator

A dictionary file, to work with KisMAC must be a .txt , Plain text, and have an EMPTY line at the end.

The files are available for Download here.
Follow the signs to "Wordlist" ;-)
Be aware that the download speed is not great. if you feel like sending me $10 to speed up the thingy, feel free ;-)

Listing:
RockYou password list Full list, unsorted. The Rockyou list is a 32 million (yes, million) password heist

500 most used passwords 2005 formatted lower, Proper, UPPER
Twitter banned password list
Rockyou list, top 100
500Twitrock a buffet of Twitter, Rockyou and 500 most used. 55% were duplicates (!) 1533 entries formatted lower, Proper, UPPER
Dog Related
Hash Passwords 2    Truncated at 8 Ch mini for use with WPA. 546,000 strings
Generated Wordlist Alphanumerical + Symbol 4Ch long (.Rar, 43MB. 127MB unzipped)
Random Passwords (not all are 8ch mini) 261,255 words

Request?
Leave a comment.
Before leaving a comment, read the article about the SIZE that a Wordlist can reach.

Twitter banned password list in clear:
1. 111111    123. erotic    245. password123
2. 11111111    124. extreme    246. patrick
3. 112233    125. falcon    247. peaches
4. 121212    126. fender    248. peanut
5. 123123    127. ferrari    249. pepper
6. 123456    128. firebird    250. phantom
7. 1234567    129. fishing    251. phoenix
8. 12345678    130. florida    252. player
9. 131313    131. flower    253. please
10. 232323    132. flyers    254. pookie
11. 654321    133. football    255. porsche
12. 666666    134. forever    256. prince
13. 696969    135. freddy    257. princess
14. 777777    136. freedom    258. private
15. 7777777    137. gandalf    259. purple
16. 8675309    138. gateway    260. pussies
17. 987654    139. gators    261. qazwsx
18. aaaaaa    140. gemini    262. qwerty
19. abc123    141. george    263. qwertyui
20. abc123    142. giants    264. rabbit
21. abcdef    143. ginger    265. rachel
22. abgrtyu    144. golden    266. racing
23. access    145. golfer    267. raiders
24. access14    146. gordon    268. rainbow
25. action    147. gregory    269. ranger
26. albert    148. guitar    270. rangers
27. alexis    149. gunner    271. rebecca
28. amanda    150. hammer    272. redskins
29. amateur    151. hannah    273. redsox
30. andrea    152. hardcore    274. redwings
31. andrew    153. harley    275. richard
32. angela    154. heather    276. robert
33. angels    155. helpme    277. rocket
34. animal    156. hockey    278. rosebud
35. anthony    157. hooters    279. runner
36. apollo    158. horney    280. rush2112
37. apples    159. hotdog    281. russia
38. arsenal    160. hunter    282. samantha
39. arthur    161. hunting    283. sammy
40. asdfgh    162. iceman    284. samson
41. asdfgh    163. iloveyou    285. sandra
42. ashley    164. internet    286. saturn
43. august    165. iwantu    287. scooby
44. austin    166. jackie    288. scooter
45. badboy    167. jackson    289. scorpio
46. bailey    168. jaguar    290. scorpion
47. banana    169. jasmine    291. secret
48. barney    170. jasper    292. sexsex
49. baseball    171. jennifer    293. shadow
50. batman    172. jeremy    294. shannon
51. beaver    173. jessica    295. shaved
52. beavis    174. johnny    296. sierra
53. bigdaddy    175. johnson    297. silver
54. bigdog    176. jordan    298. skippy
55. birdie    177. joseph    299. slayer
56. bitches    178. joshua    300. smokey
57. biteme    179. junior    301. snoopy
58. blazer    180. justin    302. soccer
59. blonde    181. killer    303. sophie
60. blondes    182. knight    304. spanky
61. bond007    183. ladies    305. sparky
62. bonnie    184. lakers    306. spider
63. booboo    185. lauren    307. squirt
64. booger    186. leather    308. srinivas
65. boomer    187. legend    309. startrek
66. boston    188. letmein    310. starwars
67. brandon    189. little    311. steelers
68. brandy    190. london    312. steven
69. braves    191. lovers    313. sticky
70. brazil    192. maddog    314. stupid
71. bronco    193. madison    315. success
72. broncos    194. maggie    316. summer
73. bulldog    195. magnum    317. sunshine
74. buster    196. marine    318. superman
75. butter    197. marlboro    319. surfer
76. butthead    198. martin    320. swimming
77. calvin    199. marvin    321. sydney
78. camaro    200. master    322. taylor
79. cameron    201. matrix    323. tennis
80. canada    202. matthew    324. teresa
81. captain    203. maverick    325. tester
82. carlos    204. maxwell    326. testing
83. carter    205. melissa    327. theman
84. casper    206. member    328. thomas
85. charles    207. mercedes    329. thunder
86. charlie    208. merlin    330. thx1138
87. cheese    209. michael    331. tiffany
88. chelsea    210. michelle    332. tigers
89. chester    211. mickey    333. tigger
90. chicago    212. midnight    334. tomcat
91. chicken    213. miller    335. topgun
92. cocacola    214. mistress    336. toyota
93. coffee    215. monica    337. travis
94. college    216. monkey    338. trouble
95. compaq    217. monkey    339. trustno1
96. computer    218. monster    340. tucker
97. cookie    219. morgan    341. turtle
98. cooper    220. mother    342. twitter
99. corvette    221. mountain    343. united
100. cowboy    222. muffin    344. vagina
101. cowboys    223. murphy    345. victor
102. crystal    224. mustang    346. victoria
103. dakota    225. naked    347. viking
104. dallas    226. nascar    348. voodoo
105. daniel    227. nathan    349. voyager
106. danielle    228. naughty    350. walter
107. debbie    229. ncc1701    351. warrior
108. dennis    230. newyork    352. welcome
109. diablo    231. nicholas    353. whatever
110. diamond    232. nicole    354. william
111. doctor    233. nipple    355. willie
112. doggie    234. nipples    356. wilson
113. dolphin    235. oliver    357. winner
114. dolphins    236. orange    358. winston
115. donald    237. packers    359. winter
116. dragon    238. panther    360. wizard
117. dreams    239. panties    361. xavier
118. driver    240. parker    362. xxxxxx
119. eagle1    241. password    363. xxxxxxxx
120. eagles    242. password    364. yamaha
121. edward    243. password1    365. yankee
122. einstein    244. password12    366. yankees
367. yellow     368. zxcvbn    369. zxcvbnm   370. zzzzzz

Installing Actions on Photoshop Elements For Mac

2009-12-19T10:04:00.020-05:00

Photoshop Elements For Mac: How to install Actions

I know ... once you know how to do it, it's simple. It's just that I have to find a simple 101 way on how to do it. I admit it: Not that I am a dummy, but I just need a clear & simple explanation. Are you like me? Good ....
So, here we go, Step by Step....

Instructions for adding an Action to Photoshop Elements on a MAC

First you need to download an Action, you can find them free of charge. Just Google it and you'll find score of them or go at the end of this article for links ( If you ad the actions one by one, you'll have to repeat the following steps each time )
As a Ante Scriptum, not all of them will work; Depending on your OS and on your Photoshop Version. I have Photoshop Elements 6, the latest one is 8. If you feel sorry for me, you can send me the latest version; I'll gladly accept it.

Download the action(s) and put on it the desktop
An Action is composed to UP to 3 files:
.atn : The Action itself
.png : The Action "icon"
.xml : The Action "Instructions"
You may or may not have to have the 3 files, sometimes just one is provided.

With Finder click on the Hard drive icon ( Macintosh HD ) ( NOT the ~ User/ name / .... Folder)
Go to the Library Folder Then go to Application Support >> Adobe >> Photoshop Elements >> 6.0 >> Photo Creations >> Photo Effects

Drop the .atn and the .png files in this Folder Location.
Note: Not all actions will come with a .png, it's fine... you’ll just need to know that the action will display with a blank box, or you can create your own .png as example.
If you hover on the blank icon action, you'll see the name.
IF a .xml file was provided, repeat the steps (copy etc) and place the .xml file in the folder:
HD \ Library \Application Support \ Adobe\Photoshop Elements \ 6.0 \ Locale \ en-US or your own locale \ Photo Creations Metadata \ Photo Effects

Within Finder go to Library >> Application Support >> Adobe >> Photoshop Elements >> 6.0> Locale >> en_US. or your own locale Rename the “MediaDatabase.db3” file into “MediaDatabase_OLD.db3”
KEEP IT as copy or backup. If you are like me, you'll backup the backup.

Close Finder.... Now you can open Adobe PSE 6.0.... After few seconds, you should see a status box saying “Building content & effects”

After the update is complete you should find the actions on the Right side of the screen in the tool box/bar. Go to Effects > Photo Effects and display all
Notes:
! Don't use name longer than 30ch for Action file, it (seems that) it may interfere in some way
! If you plan on doing it more than once, just create a shortcut to the folders (Make Alias) It will make your life much easier: One Click and you can drop Actions in the right place.

If you downloaded an Action file AND a .png together, it's all good. If not, you will not see the action "icon" on the "Effects" table
Example:
Blue Arrow: Action with a .png associated (You have an icon)
Red Arrow: Action with NO .png associated (No Icon.. create one:-)

If you want to create your own .png , feel free. Just grab one from the folder and modify to make your own. Name the .png with the same root name as the action. i.e refine.atn & refine.png , and you'll be good to go. (don't forget to place it in the same folder too...) Or you can use a picture, use the action on it, and save it as a 64x64 png file.

Folders
Depending on where you'll drop your Action file, the Action will be located on a different Effects table in Photoshop. In this example, we tell you to drop in:
~Adobe >> Photoshop Elements >> 6.0 >> Photo Creations >> Photo Effects
But you may drop it in your folder of choice. i.e Filters , etc.

Download Actions
Links provided "AS IS" with no warranty whatsoever implied or not
Photoshop Elements 6 Actions Coffee & Tea Photography (Great set of Actions)
Vintage / Retro, Retouching etc

Panos Actions
Symmetry
Rainy Day
Border and Bend
Out of bounds
High Pass Sharpening
Old Goodies (Set)

KisMAC 0.3.0 Released

2009-12-08T07:47:00.002-05:00

KisMAC 0.3.0 Has been released
Last Version as of Dec 8 2009

Available here, Or at the KisMAC Download page
Please, before installing, be sure to follow the proper install procedure and remove the old preference lists files as indicated here
KisMAC 0.3 is made for SNOW LEOPARD 10.6. NOT "Leopard 10.5"